{"report_id":"791ab09e-a8d2-49d9-b1d8-aa5775a7fd26","version":6,"status":"done","tags":[],"date":"2026-04-22T18:23:26Z","url":{"schema":"http","addr":"kcexx152.com","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"104.21.92.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"title":"KCEX","dom":{"size":267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"f2b46f0e3a4400514655fcfa44c0124b","sha1":"3cbc9b1c7b7cfcd628a88c0fa0884864345185e5","sha256":"1cf432fc9595130bb06c654fe72b88fdecbae9bddf18dab6799b1e5a2011d194","sha512":"2d5a4b30e02eb2a1cdb23efa48a5d256e5fef23421a9826ea0e74904710c396c3e3afd56056391898d9f65c2ae2404ac97ad01c4659678cf161d1c42e9baa551","ssdeep":"","tlshash":"86d02b9fcc21c14e880166d88691f558584bf21e5714ce8cfce034b8d5496ad0cd3288","dom_hash":"domhashe9551ca6980fee53ee15afe26c1cd5b2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kcexx152.com","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"104.21.92.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T18:23:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"kcexx152.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-01","domain_rank":0,"first_seen":"2026-04-22T18:22:46.09674Z","last_seen":"2026-04-22T18:22:46.09674Z","alert_count":102,"request_count":51,"received_data":3882757,"sent_data":25666,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"image.providesupport.com","ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-09-04","domain_rank":225098,"first_seen":"2014-06-19T18:41:57Z","last_seen":"2026-04-17T10:50:46.043977Z","alert_count":0,"request_count":4,"received_data":18750,"sent_data":1902,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"202.181.25.23","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-04-18T10:11:58.126269Z","alert_count":1,"request_count":1,"received_data":93687,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":1,"received_data":161181,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.huobi.pro","ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-19","domain_rank":3114416,"first_seen":"2017-09-16T11:43:47Z","last_seen":"2026-04-19T16:00:38.013034Z","alert_count":0,"request_count":42,"received_data":31086,"sent_data":21391,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1675070,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2026-04-22T06:56:53.121021Z","alert_count":0,"request_count":3,"received_data":1409496,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":987273,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2026-04-22T06:56:53.113577Z","alert_count":0,"request_count":3,"received_data":3672,"sent_data":1855,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1537350,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2026-04-16T12:03:56.62648Z","alert_count":0,"request_count":2,"received_data":2040,"sent_data":1105,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":6149,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb1ba546ada0b7bd4b7f89f1b8d1cc0c","sha1":"8e62837ecda98839b1d2884876d31fb52352ff3e","sha256":"07b77af75f3f217fa12ebeafd10ff3e56ef95d28f48d61cc7b5c1ab61137a8fc","sha512":"b61bd5a88873c2834f8454a2c00fbea3fdd636782a220219d958b58067d3324fb4283646de18c70247e00905f462a803753ff996d5c4f1167635186d00990a09","ssdeep":"","tlshash":"62e02696a906a13d86aa5096a6dfaa40a4a1216c28b1c4814464cca02828eb793badc9","size":313,"data":"","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:26:19.988396Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e26430b47e80cc275cc8c2c3df1e34ec","sha1":"677488dc66730ccdc80cab85d1ee9e42bd8a32c0","sha256":"f024a25d7c636d96b8c450498bac0358db2f4c5808e5ff446b733034858ab2d0","sha512":"860ae8c19fee776f1db9fbf3c6abb0b7383637088c17dfe1c20a8436827db711c7d6f2df65fd398d2cdb78ef44fe50db9849b2f908f03b3966b3221caebb0ed5","ssdeep":"384:ubYpA2XqL6zngB4iJl+f9u8Dkn446NwMhHgyWfGhsGqPV/pv3aM6BFYzXbZGs+Bz:uH+gUTQyW+hsZ7vxgFiXsG0","tlshash":"e5e242e2e7bcab364a96015fa6cf81e1e725d039362bc58e395cc1281791d3897363f4","size":31518,"data":"","first_seen":"2025-11-27T17:09:49.651895Z","last_seen":"2026-04-22T18:24:40.22869Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11944f96ddb914d6b0426d8e668bba1f","sha1":"3fe2ec69ce9987e299d3093ed220d6033c6b453c","sha256":"3a827d9885131ac0184de9f294c935d11c5a61ad995d8dcc69bf40a52f0c7a27","sha512":"b29a4b40f1419fa6855283038d4b24f4e0a596bde5ee6b87adf06a8d2e6db2e77497579107be3e6d707c3b927de08094c1dc2bd9cd240b92f5dc8502ec0281da","ssdeep":"384:vInEviJS3nrtb5n+j29cMw87zfyz5Lbv9/:vQMcYr5xyIo4721DJ","tlshash":"0c420938fa9b245c39a334148f6f005434d8a583c705cb153dadeac26fb552ba4badde","size":12632,"data":"","first_seen":"2025-11-27T17:09:49.658262Z","last_seen":"2026-04-22T18:24:40.231086Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.23","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T22:21:19.915341Z","times_seen":18938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-22T18:28:09.598179Z","times_seen":9905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.052952Z","times_seen":6103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882186484","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4443e6561a5acf1e2b4db01b59af6bff","sha1":"7383284aa34419da3a0278a5ca4e08b07d8b1314","sha256":"d2dd9f43e63e21f66bcb617c4cc97b6e37f2add8eecd663d6e730fbeb6478427","sha512":"169e0fb59749e731f054277abe16f586525bbaa440c764f68e1ed8a6a2cd28faa646b686c2d68b772c451ee3c4c3456e1f9a388368b5dc34030fe9a829775419","ssdeep":"","tlshash":"1621f1774508237a82091df7e57f2e0e9a72585faae9c7d9c4344e40106e73af432ae8","size":1199,"data":"","first_seen":"2026-04-22T18:23:33.954076Z","last_seen":"2026-04-22T18:23:33.954076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1e4fe984466261ce9e2e20fbaa490a7","sha1":"4d92534f6c75a44f8ae0f02d084bf25472bb0622","sha256":"f83b38f91e007e8149da7798cf697aa8faeaee62373701fef35fadaa1e7a2a6f","sha512":"2077c4cf45754c175051720bfb87dfc531cdfdc72e50171f036f9a296b69a201fd838032cc625f81e7f4edf4535a0b1112db60942e819f4b863c68ea792efb83","ssdeep":"","tlshash":"5e4100c0c0200c00c08000380c80000820202202c000822b0802a08208088228802808","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.172072Z","last_seen":"2026-04-22T18:24:40.236495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"1c640b947922f0d69fd756e2b4903ace","sha1":"beb26f476805278458efcee875257d50e1a0d49f","sha256":"3b21ffec13ad3abdc07be74458cb3e974da2b022afdbd6e44b965e420ab38b20","sha512":"8efab5af6b90dbfc4714d0c3852e7dfdb2ab30b845f474dbfc007da7f67edfafa4bd37958db46db4431ab4b2d7c0aed3027139a1a6cfc02283829fbaf14f2cdb","ssdeep":"","tlshash":"41410080c0000e00c08200380c80020020280000ca0880000c00a08000080228802828","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.18006Z","last_seen":"2026-04-22T18:24:40.232847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"449d3adc719357ac5f6263412e9a6af7","sha1":"8c4014a2c16c7fe4380700a448b5cef664d0d452","sha256":"5a7e3624aa3530d1fb5af9140a2e1582f97a2b98457a47a2c0cb80a745551f4f","sha512":"3e6d02a2f39bae1d55f51da5fea667b885a08d0e2b429d346ebfbfa2d46ce2fb35f0f80619667453b69eb1ce4d83cefe5ce2515e4a885f64c1e103b818ef598f","ssdeep":"","tlshash":"3f11cb01931b5cd83af2a56f1f5381120c392413684bca283f0dd6e09fede539555dad","size":1100,"data":"","first_seen":"2025-11-27T17:09:49.664143Z","last_seen":"2026-04-22T18:24:40.23339Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25b6d15f572fc63d464c548d79358c18","sha1":"6b38f5db55ac3fac29e4f7b3f8fd49ba202434df","sha256":"13519e4ca14c1fb83c72b9b23233c57ba83577a0db5cf7d56fc2dc7de06a50ca","sha512":"1f9e44a6d8b890ed050f6fa9b51f619fc3e7da029119a109afdce655df8fbca952a73a396dd2dc564c09a630ffe8cfebcab2363d1e7187fe7e6163e012725493","ssdeep":"","tlshash":"03f0845e1a0ed3fa40a8427a5b71c2df75d05bdb080a6905fe8f02231fac425bc81fe2","size":572,"data":"","first_seen":"2025-11-27T17:09:49.664958Z","last_seen":"2026-04-22T18:24:40.234806Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"2a172d2a20945eeeff97ffd4d5539b98","sha1":"258e4e8e228b1d4a818a674db123af64a69f6b51","sha256":"d16ddb6e490a2a98a9740790dee2d164724b4a8b0a823b3795f036670d27bd64","sha512":"e39d5cd0da43a789c7c9d4f965360146af286b7fc9d58e1315a863dc2c88f36f8180205fd6d40960f7255dd038381518d8a08e8bc872a2832e0d80002944fcba","ssdeep":"","tlshash":"54410080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":1984,"data":"","first_seen":"2026-04-22T18:22:44.174435Z","last_seen":"2026-04-22T18:24:40.231702Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3d9d4e4763e3e7f637700a47dd5d842c","sha1":"b7126cb67a7e05fd2d3499e761d513fdeaa398e9","sha256":"37a1a50377b00dd662ddf8091e4e326d2a474b00ec800e559a7b8f50a8a17139","sha512":"84a623e505e53881d38b11a1272395a01bd0e866453a0f4ad179ad7eb3bfd3bc301ea3fc9b1adc96a91de73a0adf269d0da5582d114a4d175be6ca69df567bae","ssdeep":"","tlshash":"5b410082c000082880a000380c82000020200000c00280200c0880e000280228002c08","size":1990,"data":"","first_seen":"2026-04-22T18:22:44.170486Z","last_seen":"2026-04-22T18:24:40.233948Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"82538862f750e4af0e4d31d9cc5f9f89","sha1":"2ceb5e40c6dd39a9ac9f57f32b9a60ef4c6527d8","sha256":"13eb507f58506b71dbd4eef9bc2e77d37ac210b143ad4c903ed573665a64f319","sha512":"857c339c699dabb51a2fa801e6f3afc0702b7bb4e0e0bd392a9865729809b73e6272c78e1132059d2dc19e3dfe51d669e327e411ca2275a6e7d17aec439e0ba7","ssdeep":"","tlshash":"704100e0c08e0c22808080380cb0000220208000c8c08000080080800008002800080c","size":1992,"data":"","first_seen":"2026-04-22T18:22:44.172958Z","last_seen":"2026-04-22T18:24:40.237034Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","size":14496,"data":"","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-04-22T20:49:43.793179Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fd26749d6ce6d2748d4da4e2461c61b","sha1":"a58fe48c5cfcba2900dc7465b85fe9d6341858c5","sha256":"7e8a1c14399902b2f2339515015e02d83ac304db944069190b67e41983b17e6b","sha512":"1c5f9d29c47bf268dd1f88b77c6149e5098e58b6342ef7e037e50a73b481452a68fdca00a4ba69f38c0a931dc36ffc821cb959f9f6ab2aa896de19a09a2d7b46","ssdeep":"12288:AVciXSnka9BGfTsHI5e4lARLgGqg45s/1OZ6:slXSkFTsHI5eRpPqh5s/d","tlshash":"924528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1196802,"data":"","first_seen":"2026-03-06T10:13:01.556157Z","last_seen":"2026-04-22T18:24:40.230546Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7cd50ffd0c7aac154a044dc63a12fd05","sha1":"07c74c2937c2d9626db8c37c8b002e785df5b9ae","sha256":"09a1b789e923f9f399ef47ae6852cf6c46abdb51a86ae6abe4cc703f196128e8","sha512":"2730f7b1c221bcc9bf4606919512124f2ecda1153ad82f9adcee010d1672b8494a441132ba4518925cb813ccb6c76ecbfb0bd4612aa73027c2ba03be5e1c1cd9","ssdeep":"","tlshash":"bf410080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1977,"data":"","first_seen":"2026-04-22T18:22:44.167972Z","last_seen":"2026-04-22T18:24:40.235943Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1e4fe984466261ce9e2e20fbaa490a7","sha1":"4d92534f6c75a44f8ae0f02d084bf25472bb0622","sha256":"f83b38f91e007e8149da7798cf697aa8faeaee62373701fef35fadaa1e7a2a6f","sha512":"2077c4cf45754c175051720bfb87dfc531cdfdc72e50171f036f9a296b69a201fd838032cc625f81e7f4edf4535a0b1112db60942e819f4b863c68ea792efb83","ssdeep":"","tlshash":"5e4100c0c0200c00c08000380c80000820202202c000822b0802a08208088228802808","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.172072Z","last_seen":"2026-04-22T18:24:40.236495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"1c640b947922f0d69fd756e2b4903ace","sha1":"beb26f476805278458efcee875257d50e1a0d49f","sha256":"3b21ffec13ad3abdc07be74458cb3e974da2b022afdbd6e44b965e420ab38b20","sha512":"8efab5af6b90dbfc4714d0c3852e7dfdb2ab30b845f474dbfc007da7f67edfafa4bd37958db46db4431ab4b2d7c0aed3027139a1a6cfc02283829fbaf14f2cdb","ssdeep":"","tlshash":"41410080c0000e00c08200380c80020020280000ca0880000c00a08000080228802828","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.18006Z","last_seen":"2026-04-22T18:24:40.232847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7c727f5ea12d81da8883b99e80ee6998","sha1":"ae50a2eca8097b8ea51d8c3d5d517b3e200ba70b","sha256":"e38f12ae66161d8050fcf83f93f8a73aa6c7f2c7d3f84b370b7167b420fb58d1","sha512":"5b6f6ddca9ab1b1e43240339081d11f7824c52369fc668bebbff4758cfe6edc8452b8a57b4fc2552a646617c298b9befe531fb58bb5f5d2ba550cabb29a0ea37","ssdeep":"","tlshash":"4d4100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":1982,"data":"","first_seen":"2026-04-22T18:22:44.179225Z","last_seen":"2026-04-22T18:24:40.22678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f970323fe286aa570ae97486d77cb646","sha1":"b6e0c47107be73e0046e993c6555884cb67d5933","sha256":"935875f4ee2dce57d7804c53519186354e4ae1450d2aa18a4310fccdf6b91c94","sha512":"559596a0171f9b703bad763b267ed018959f35fb860da1487d87cb826bc280c471ba0a03acd53605ccc070a322b05a4a556c28832039fc05cacd63d6105fb4ac","ssdeep":"","tlshash":"fc4100c0c0003c00c0c3003c0cf00000f0300000c030c0000c0cc0cc00ccc33c000c0c","size":1996,"data":"","first_seen":"2026-04-22T18:23:09.944018Z","last_seen":"2026-04-22T18:24:23.746973Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-22T20:40:29.730152Z","times_seen":13308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4033dd87f906c92926a2b213a83002f","sha1":"ed2ccca6d3d93877c57a8614f2b5765452930665","sha256":"e5c97568860884408b75a5ec61ec252f2ea3fe57bba4302301a69aa32fd2642f","sha512":"2cb1ae773ca03fdd26c7ee7db683325f4602da218730363824d2fe1ac4a730fe8e4b0fe377e45ff7cdca6f27ba1ad4cd5840c44c22e535e7efd43323384740a5","ssdeep":"","tlshash":"0641020a487300b8944367bd1b5f910c267125532417ed10390ea750ef59ebc95adffc","size":1919,"data":"","first_seen":"2025-11-27T17:09:49.66577Z","last_seen":"2026-04-22T18:24:40.235292Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9af77ec196334c476628b867d7e945c6","sha1":"2fcdd41674765b878327d2311e2aee1e8996358f","sha256":"9e60f9328e42e3b7861acb1106d6ff7110dbb2bc081c071c19b803a109f8c061","sha512":"99870d1c3ddb87ee590f88fb2fe1cc2f3f73d05b954789cd102323c73da661dc5bbe8e4ece94239837fef8fed008faac350817c0f98b71e4e93d949fa892de85","ssdeep":"","tlshash":"bce0a78575921017a0af30ba45cf3980246cd20f021acd4c382dbac44f99cacd2b5f2c","size":298,"data":"","first_seen":"2025-11-27T17:09:49.66663Z","last_seen":"2026-04-22T18:24:40.237599Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-22T18:27:50.069436Z","times_seen":7517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","size":16345,"data":"","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-04-22T18:24:40.171544Z","times_seen":2552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","size":1281,"data":"","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-04-22T18:26:19.966909Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a19014a82b6431020a77783ac142457f","sha1":"cd34bc7a4b8089979b3e82fbef84dbd275f20daf","sha256":"e25b0694eceb824fc684eae117b909d55e0bf829bd776d9085709d1a38bf7640","sha512":"a5c0b04ed4b906ffd57f1cc4ae4c593d18755bb21d86b98324e464efebfbf09d3a9c8124b7b97a52752484f496f327f6c4d61e604c0112a3e7696c4fdc5c6a90","ssdeep":"","tlshash":"54f0dc1aa4f315681473b0a94bff8c2570a1301ba24cde227f4d41459f1a1880e50f08","size":507,"data":"","first_seen":"2025-11-27T17:09:49.667563Z","last_seen":"2026-04-22T18:24:40.239373Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7cd50ffd0c7aac154a044dc63a12fd05","sha1":"07c74c2937c2d9626db8c37c8b002e785df5b9ae","sha256":"09a1b789e923f9f399ef47ae6852cf6c46abdb51a86ae6abe4cc703f196128e8","sha512":"2730f7b1c221bcc9bf4606919512124f2ecda1153ad82f9adcee010d1672b8494a441132ba4518925cb813ccb6c76ecbfb0bd4612aa73027c2ba03be5e1c1cd9","ssdeep":"","tlshash":"bf410080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1977,"data":"","first_seen":"2026-04-22T18:22:44.167972Z","last_seen":"2026-04-22T18:24:40.235943Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7c727f5ea12d81da8883b99e80ee6998","sha1":"ae50a2eca8097b8ea51d8c3d5d517b3e200ba70b","sha256":"e38f12ae66161d8050fcf83f93f8a73aa6c7f2c7d3f84b370b7167b420fb58d1","sha512":"5b6f6ddca9ab1b1e43240339081d11f7824c52369fc668bebbff4758cfe6edc8452b8a57b4fc2552a646617c298b9befe531fb58bb5f5d2ba550cabb29a0ea37","ssdeep":"","tlshash":"4d4100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":1982,"data":"","first_seen":"2026-04-22T18:22:44.179225Z","last_seen":"2026-04-22T18:24:40.22678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/js/axios.min.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58835c3f08ef2a2018ac37b27774fa2c","sha1":"e7a35a9106953bc41a4290cc8461c52612ea4379","sha256":"d5fba18e5f50a6f74db552765e4e256d2f4a6e9b46c2234b5e07f3c63fdcec28","sha512":"ed99a7f144d3eb0df27d5f26027065c985f90011a6fa29b821df2e331e7f852933173ef4074946a33e1e42837c67348d0e69e25de4980ea451657fc8fcc60dc6","ssdeep":"768:KCDyBTI61NNOlU1HI0DL48QDLAxH/uzEZBK5lilUpb0:ctND880wH20W+","tlshash":"a9d2e8c8ba91b071576771b5406f250bf23aa926e48dc490f130e8ea7cb850e9767f7c","size":29799,"data":"","first_seen":"2023-07-06T08:57:57Z","last_seen":"2026-04-22T18:24:40.18565Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194416,"data":"","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-04-22T18:24:40.204636Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3060d9e02a3d9515af4a0fafa8039c35","sha1":"d346c0e63e00b492013c091c3f1cf5e25f7aa716","sha256":"5cc19e71bc6dc6c88f1694a343d12edb1862648171f783cdfcaaf3dc9e2f4dbd","sha512":"7c7eeb168acb3c1967112a2437505df2c3106c47c1250d1b81bf2f5b8052bc80abf9df6b18911b1d05abf54922c638bb670ad685c622cb0e526e03f212c9eaea","ssdeep":"","tlshash":"544100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":1986,"data":"","first_seen":"2026-04-22T18:22:44.168812Z","last_seen":"2026-04-22T18:24:40.23228Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/js/coin.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8185ca5042d7354128c043a61e475ca6","sha1":"35d4e81a3b0836fa59e8ae6110534870ae64fada","sha256":"58afa4b99b8bd0c2933d334837cf04f8e48681beee9ff4759b08e55558e30c99","sha512":"58fa2e9dbac39e2262030b593d16335a596af2659b50a4ab0bc1c19fb9c3023084e1c664518c9b4e3974cab617c3cbdfcb333ac8b754f201c6bd47316318038e","ssdeep":"768:OzuFp6a3zMbmhOETNkSYzAHX0NvIJQbohosvtjKTxUasQ2IRT9rknfsjSf/lLnc5:Ozw6H2l+eof/e4+Pt72","tlshash":"4c235d48b2e067185af70fa33e179cd5f7ba415d358445a39f8ca7e09632326f680b36","size":45868,"data":"","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:24:40.178868Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kcexx152.com/xm/1594057379245582.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/1594057379245582.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 02 Jul 2021 16:14:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60df3b68-c13\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcD%2Fk37upaAmMeAutqHpyohq4mWL4MJZ2JjGluu4fVml95wUFDcHQVSduF43wutJF6ncv%2F10eqbJyJMwjWZMU4SipaelsIuRMj96Bw2Y7KmrjzlXf589NvmWYp4nf2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09c45694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"033d340b5a4a22d8e8590b98409158f3","sha1":"098ef5ee4b44f780df7f39c022ea491cacb32e7f","sha256":"0b53847e742884cbfbc563109bb99cacbc75fbb1bca892a1dbf68982e68778a0","sha512":"60de2b9014037bbd2f081ffe295d2cd0d0772bfc9b878986404981aff8df34a51611ffe2d214e0ce8f3849f9f9bda9e52b650d50db089953fde9bbb5b9725339","ssdeep":"","tlshash":"03512bcb908c59b6afe24ea002945ce48021c177ad3b4726963ae91e9f742f6070dc62","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.900191Z","times_seen":3289,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:20.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:20 GMT\r\nx-request-id: 88d8341b3d15a4af168ccca2cbdcb2a9\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 73c7d4150f7b524bfbdd80c94d86d429\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: EMW_1_2eK-ejj8WckJduAYWAoHlU1E3jfOjfDRBCEVoca41XTnfSYQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ebdb8734a2fe1ffa08043b8312ed5933","sha1":"abd4351514493efcd31bd6666a23988b9ac3d4a8","sha256":"6e88c09589cdc942e48ea46734b00fb573e095292e513eb6f4fc6164cd8a3631","sha512":"9b3f493a201ba6a1a243324295c73cc3d0d59a80f996fdaf7b0461810d4857128e4346d8db125c369b3fd139e9062f794d88b40fb2247f76157447251226ce80","ssdeep":"","tlshash":"f1d023c19fc02140555113c4dc583d385a7e1c8e504a4a0342fd5d5305c5570f21943f","first_seen":"2026-04-22T18:23:33.938551Z","last_seen":"2026-04-22T18:23:33.938551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Jun 2022 03:16:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a94f00-2f0fa\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPPjp8tQeZ8ix063RdjVQjw58%2FCoTsg8IU%2BtV2Xi893sDwuaWG3kBMdILdcY%2B6RE7OctJYDmaJHLAv1T09Fvli7ULaX72ziAzy7pjLFyz8TBGbhrMoG%2FHMLrU5J9ma4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f9935694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.066152Z","times_seen":3243,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"5CC75246A01D73279B6562D7EC1FA1B8\"\r\ndate: Mon, 16 Mar 2026 09:46:28 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D174F6DD953436CB4C5D\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11091130583004183539\r\nx-oss-storage-class: Standard\r\ncontent-md5: XMdSRqAdcyebZWLX7B+huA==\r\nx-oss-server-time: 4\r\ncontent-length: 64764\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11231238137106407280\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":194416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-04-22T18:24:40.204636Z","times_seen":203,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:16.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:16 GMT\r\nx-request-id: b77977b3530cce5f9657ab07ae6d4a46\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 6eaf57379a3bd924588db794c9bc5695\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Rg3COurY92iKBt67FtjtYM94mj1M2nM1OW7tYcRUnAXS1jR4mZwnlA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b68e3975942b0b505076e78c43c7f3ff","sha1":"63f6e6c9ddd66b11c4406168dbe906e5893f21bd","sha256":"3a35ae088854d9039d1e64e1e4f1976f597134c75a93f9e578562660f8c3acf5","sha512":"4c827157fdb1c8992c86d97e53012ce300945ee06bdbead93d4c74f963f06628bec7f969c38ce00e7b02f86f2fb5e578d423eda09869918f583dd5a596247115","ssdeep":"","tlshash":"7cb012000f9b453f2d8c40492176052106ec84c031fd014016cc406044decf1ea05188","first_seen":"2026-04-22T18:23:33.940946Z","last_seen":"2026-04-22T18:23:33.940946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/trx.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/trx.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Nov 2021 07:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e304-d30\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbtl5JGO0QJcKJQQmq4xhdb0ZkInQ1wOxeBWaICI1LJ3RPrPEkvwG9pI5UpGpVU7OWMKz73jaxfBTiUulbw88vemqaPZ7ZUjI5Uq2%2FxEMWhs6fNt9RUOhyO76FymV5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09be5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"94689045fe789ea5a804e04d180d5b88","sha1":"4141c8cf319b2a9beabd2f67d9da1591ae1d805d","sha256":"85acc22574a8a833c94e8c767d461f7181a18dab1c3329d955c1eb6b801b6b4e","sha512":"ec2f109ae0ff20f4518ea4d1f48c771c2a9e34acd8895d2dc7c52c3302af590bb25e29484eaea887ac4869fbfa5ad1696c409493a56ff82e6ffe3ce177f3543a","ssdeep":"","tlshash":"ae614b9fcfe19cec8700d0ed7435d46bd5e43e5b46569c6ceb0d10a757c28215986339","first_seen":"2023-05-22T11:04:23Z","last_seen":"2026-04-22T18:27:36.832414Z","times_seen":2188,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home-p-facebook.svg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-facebook.svg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6YT8rMdCZmF%2FFsj5Wv30MCmemcveKMjs5fKKd4SgD2mw8qt3gQnVfg8JH9nBY%2FIDd%2BeUP0guH92BC%2F0YhdcH4wWu0hEUCeJ4lgcZm44eIRaTXU2a5UedLIJZaQb6Sk%3D\"}]}\r\netag: W/\"690a1c3c-348\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a85a29e15694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3db779ec4a481ae2eae484d954e87833","sha1":"43397b3ab06d07d17d3a377170e2f1572415ae9f","sha256":"3ad52d01c6831d3321b33c3b554d91655c55e6fcf91a0d57a17abe83a7106e8d","sha512":"f96622bb1d670985bda68477010139bd92c03e5e4b25283c0130194e1b1a80abf84371f1a281b568acf1fd210ecf2c4563193993703a42daf917ded5d59b9cf1","ssdeep":"","tlshash":"6701f6f4d29cc480c5409b0f41ab94f15776b3b785aad5de7b8d25c6f90c09f0a75e80","first_seen":"2025-11-27T17:09:49.647954Z","last_seen":"2026-04-22T18:24:40.162907Z","times_seen":17,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/jst.svg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/jst.svg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Mar 2022 06:16:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6236c6be-4b7b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Yq9Q65YZ1%2FshSS0vDLPAO9kmY45tv0UtLHqHvkL%2FFx7XAAUfuht9g1eSR8nhHIRp48piMX8GDtvJdYMLQ14VeidZNFzfnbv2GLSrPortdgVVn6hrL2bxGYKtMVMwxI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09c95694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b993b0a39d50c323edbb5886a19d56cb","sha1":"8e183944ff4dd3741c2b18f3a2d8962b1662b1a4","sha256":"450fcc35ab762f1b121f48150a7465b6a506fee918e24a80811134ee3a1d88c6","sha512":"754b0b31db60b3b2b0b2dcbc5f32e950bd8245c08d60d4d84a8bfd7a887167dd636d8f001232639952575ac6d2ac97103c66e04a016502472412283cffd680e6","ssdeep":"192:cu7OzkWdAPKtyK2Pe+6fsKO2uY/E4vVAAm7gbK1QQlS/exkPXGmZ7ayFePl5a0FJ:cuiz5dU7h2QuagXq36Np2aE/ao54Cgq","tlshash":"6a82238d9f564f6a9485b3fdafea5050648740ec39a8e2f4e7b44473f80c6a50c48de7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.949961Z","times_seen":3148,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/3.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/3.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:16:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0ac0-bfa4\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwRVt%2FdOINWxeBJ914Pwu7EKFQG08x9R75oiHTNQ1BPiQXpVVuW1iT44ULqFLqpoRi13s%2B3Ej74516LL1%2FKoY5XxJIVjGKfsiyVMe8o2cNwAzRzT8JjyJOmn%2FLFWKxg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a19d35694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 700, 8-bit colormap, non-interlaced","md5":"605ab13aa91a4d3b95ef2385d94997bd","sha1":"0104babf6405cbb4351f1451dfb87617c4c0034b","sha256":"906004f4fae7119113a147d898e4c36c41c531114934276fd90f25aca902e72a","sha512":"d3a1da2b45f2e015c7f5627293e549d8f869929b8df28ab5184e013935d6e008d9bf0f56556245626a9dc66536f7125e5fd895533858aa37b4ea4133fa6c4723","ssdeep":"768:c2lAIvQgDS2AO2zPZbD349OOmCBbF7krncJ0xCXWHd+yUs9Q6+pMrMNJQhsh9asI:cCAQS2AO2zPZbjJOHp7kOMd+hQt+AMNo","tlshash":"5123f2816c5f32aacf1722e38d9fadca75c205a40b2a40ed4c9877cd5464f9cc6d98f5","first_seen":"2025-11-27T17:09:49.549738Z","last_seen":"2026-04-22T18:24:40.224257Z","times_seen":9,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx152.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:08.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx152.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kcexx152.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 3\r\nreq-arrive-time: 1776882188117\r\nresp-start-time: 1776882188120\r\nx-envoy-upstream-service-time: 3\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 335\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:08 GMT\r\nEO-LOG-UUID: 18288052344100065353\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f8dfc43c17f85e88a2901e696989216","sha1":"4aaa415626921f9fe3fa9dda43a9e3a35fc12feb","sha256":"3034b2b1e0b27128228f5cc2e0f248eed8bd4a5df715b99ea745ba98e5d3af2a","sha512":"e5da06523f173ad9912e30049e65c081af71dcf2cb5943301864d9bab7c3ec79c67d6501737e40187e6b249fbaf9391c93ba33290a3c2230fccea6f2e73c4f6b","ssdeep":"","tlshash":"02e0261942fc2c9b9a5640e066cce258b2c722c9a03e6ed2dec91182a29ae5d8a07431","first_seen":"2024-12-04T06:48:21.872025Z","last_seen":"2026-04-22T18:24:40.196132Z","times_seen":433,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/bootstrap/fonts/bootstrap-icons.css","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/bootstrap-icons.css HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 30 May 2024 01:29:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6657d670-edbb\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ka8n1hZyMad18EKfurKcS%2BbbQlknrPYPnBxNe1MX4RpFL4kasBr3PhZum9%2F5X2ZRlF6nxRAHKQ7r0IhPcBYXp3c0W52rWUNiNqylBqOIG%2FFXVo28Hm8oqBd0NglCWrk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f9865694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-04-22T18:28:09.601426Z","times_seen":14838,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/hot-2.svg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jun 2022 14:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a35380-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b939Xz9%2BDecvr%2FGLENJ6TKa2bneJUuAqLyQlZOHJeCCJKh6ysGvAWmbkaHflJdOVaQgkYb3wpGw8LBOqWu8H%2F0R0ir98zL6iMbyMPz5PAK842DLGgAiN9i68nS3wm3A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f9995694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:50.076028Z","times_seen":5036,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home_top_bg.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_top_bg.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 09:51:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909ccb8-6a0c3\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzFFHDF3OsA%2FFjlHqGaZ2Hx2ONXoXQKzcE9%2FvuMSe6A40Bt4U2eft22oDY4aO4nIp%2FK8hzqLMBJ8%2BfIut8Yp9vAa9UXyXK16AmWUtPZj67Ko7%2FDEHZ%2BGhf0zKBRoi1o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f99c5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 535 x 700, 8-bit/color RGBA, non-interlaced","md5":"b6d7e55919a0816b3d84bf64a46ed1df","sha1":"562b04c762b92c49245cbd3c7c3dcd5a89ace6f8","sha256":"eeebc077c321dc56641615e4d2d8f4d7fcc206e504796fe277dd5a083a97211f","sha512":"66d0551dc1a473a04108bbdf4473617eb6ab5b4b4c99aff15170f47e9f0c3bec98fa1fa390f768147e19d64b0181379ee00383cdd288346fa84170751b0d23fe","ssdeep":"6144:HYIU+8FT0nH61O2E6kRk2RTPyUBej2PxLXj7JqiaNv1Spw04OZMZ/dMW6Bml9yyV:4IAFTniDRTPyUU6HLpx4LcWf9BV","tlshash":"b19423d8eddbf51814cb9e7099557fe8036ae701cab6906ccbb47cc0282dcd6168dac6","first_seen":"2025-11-27T17:09:49.595537Z","last_seen":"2026-04-22T18:24:40.21991Z","times_seen":8,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:13.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:13 GMT\r\nx-request-id: 94bc284baa30fef39d4d1d2d8b26438b\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: de70f41bb5b7b566b9bad7a2083ac11f\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: LN7hFxld--YC2v3Me1CfwavF-eFmnhaxGsZ58Ir9f4tes9al85JvBw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9bf60dbf4bb834afd7aaf86e85b739d1","sha1":"022a3d9e576c4b12140553dd2ef29e98caeac761","sha256":"9d8a1414b6bae2ee5338d802a2ac3c9e76e6e7bc8d340343cbc004c9c25cb884","sha512":"05e8a5d9a291242a434c87f620494644f50c223b2dfabc589d64677c46e827b11e673b80c49ce90d03801358842317d4970074ae43db53e6b62bde78049b8782","ssdeep":"","tlshash":"6bd023247b040bd288526180f8057f6051ff108544c71f4667fd5c5112c52f47b1ec3f","first_seen":"2026-04-22T18:23:33.949047Z","last_seen":"2026-04-22T18:23:33.949047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:23.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:23 GMT\r\nx-request-id: 2ea8b41facacde4d11a23b4cdbc0b8b4\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4f60902ab72c4e8094c2d182b4e0b011\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: pJMI7oLyDfbC_p5ogg4zZ2rR_S3XKTHSgV36zHrJdFgszVzO4GRmMA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"07a5a3051f48f07d1ecf0ad34771ddee","sha1":"6ca905fb0543b6a833e19559a069b2645f659ab8","sha256":"fa89dac8351376e507123a7c16448aedcb4c163ddd4120a5750a006834964174","sha512":"f870e426b8034626dcd7ff59aab1a72af0c2715ead08de36aba5642ee1d0d70f6dac2a6f5090df31c8cf2021f216819a536012fa651ae208a1fa67762c50fabe","ssdeep":"","tlshash":"95d023017b5415441c451287dc2479b09ad9148610940d4b57ed4d1056c68a57d5d432","first_seen":"2026-04-22T18:23:33.950065Z","last_seen":"2026-04-22T18:23:33.950065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/1613786513998262.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-adc\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmA1cd1WyAfR511hRog1FzJXrIFgX99qc7tIaC0fRkcjw57SrSwSZVOJaKqGRvtgsa0TaQqakfaJxpJ%2FdyLXxYDbCUt2KqWry0%2FM0W54XOLNh%2F0uKCg8aXPA6Vuhk2s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09af5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-22T21:20:06.776061Z","times_seen":21040,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 215\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 9e53ce4d00ad0e57cb74b20c38460eb9\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 0b5306a12dd4bd0c3f519bd8a4741947\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: fji43FdtSr-wjTrimROw2t3hDMFJ5KkeCAC9Ldc9wJl7zutZDM4S6Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":215,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c0147c139116ad970d25f6b7f1ed135","sha1":"8f0645dd154e707a3f2f94c5ab2f0eb8825fac6c","sha256":"f2aee668c0401c27cc482454aed15011f18d9f2e5b69a09c373f6bfdd17297df","sha512":"5086429a2b4db5dd86fe00ad8d5a3388e48580a16fc482c328d8741a96babcfa719df9ef61e50338496e89689626e77cebb5e65566d3e9506b32661c651986a5","ssdeep":"","tlshash":"add0a747378411d0cd7321c1ec5119627d08250250c5460747ea5c2065850a5f41a877","first_seen":"2026-04-22T18:23:33.9516Z","last_seen":"2026-04-22T18:23:33.9516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 6b30f023816136ec9fc5a989b01a4154\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: b44f1249e4da9c60f07c9194c4577675\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: otLt1tEt2YLsWaiKeqqDvIHLlqt2JMidXWz_Zwr817CZmNr12-kJpA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ae2d1d3a43329594c2ecd9cd0c1bd66d","sha1":"d9ad7bb9a57812b86e3bc7f453dfe3d1889c7dd1","sha256":"5bb2cc5ec4bb407885019719c671d95788a686fcf283c16cbc7cbd13dba35b46","sha512":"075c655d2c96c7e4d34eb169252f5f09e8c6b782aef039e297d9b9e43e48bba592a61b22681fb7d14ed8c00d162d7bd7b35558f818d99d41370335b22057da4a","ssdeep":"","tlshash":"39d02255ba6459c88c182386ac91993066cd168514e2180b4bff8c11ab8a8b93e99837","first_seen":"2026-04-22T18:23:33.952612Z","last_seen":"2026-04-22T18:23:33.952612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home_banner_3.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_3.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 13:52:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a051b-353da\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3Dv4abTABZGpDQMmntGhq9bfyiGulf0w2DfBW7dPKekmWNApjYcFAcwAa%2FGzXEdBb0x8zECGGNX3ocANDqKBNf2fY8wml5%2FRYXlRADB%2FIaVpDp8mFO2fxBrpPYay3U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09a35694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"b3595c9e4447f6c4133f192e3cbe5c58","sha1":"08513a54419951c21614404db4131b5d70cd8a9d","sha256":"e4c8c824daefb13627d95ffcfc92e96bc1efd491e02e7782b822487d9587058b","sha512":"2395f0593bc396626efe4780e9404a0edc5fa7efaffffc6011aaebad0f271414a3823addbd894cb043fbfbdd55cff2fc92012a02a4f418c62339570013088efd","ssdeep":"3072:UIFD+3B6fRQEa1Q2qZLlLt7L1sK9aU6elKNkRzZHao00HKitP/69RXH2bwkp2:lGQJLpt7BPcU5gN+Z6o00p9+Hu2","tlshash":"61240193c8a2b2a6d6d2587d674f3e9ad770a053b1dd5f6e4f3020aa24234ccf932c55","first_seen":"2025-11-27T17:09:49.544193Z","last_seen":"2026-04-22T18:24:40.160559Z","times_seen":9,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882186484","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882186484 HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 25\r\ncache-control: must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:23:06-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: 9f06a861ce1d1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1199), with no line terminators","md5":"4443e6561a5acf1e2b4db01b59af6bff","sha1":"7383284aa34419da3a0278a5ca4e08b07d8b1314","sha256":"d2dd9f43e63e21f66bcb617c4cc97b6e37f2add8eecd663d6e730fbeb6478427","sha512":"169e0fb59749e731f054277abe16f586525bbaa440c764f68e1ed8a6a2cd28faa646b686c2d68b772c451ee3c4c3456e1f9a388368b5dc34030fe9a829775419","ssdeep":"","tlshash":"1621f1774508237a82091df7e57f2e0e9a72585faae9c7d9c4344e40106e73af432ae8","first_seen":"2026-04-22T18:23:33.954076Z","last_seen":"2026-04-22T18:23:33.954076Z","times_seen":1,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":26,"dns":19,"connect":1,"send":0,"wait":434,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:14.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:14 GMT\r\nx-request-id: 8ea521f65a9de556ead31b1d4a9916ea\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 5e519521f321b67816375d1adfd68d5c\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Ie75NbOM_0zhP7_Q2sqhq4dUv6yUth6wBAW7eMfrSWEAdQcuTolEpQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9a087971077dd27014c7a65b5a29dd5","sha1":"27b5c0422ff454dc6e39d8f0897e168bfe0e476e","sha256":"482ce389a7d310c4b50f15cf821a55b6ecc9d762f10e8e2c40479400c7c68c49","sha512":"b98432cefafff285bee84e819be3f7e503c6bfd11347bffc127425db4fd5e49e04b578612698a422c43f039cf38ecf3495b98bc0407fb02fd2eef67e3dbffdb2","ssdeep":"","tlshash":"c1d023b17f60155009e3b9c8fa561e10d65b53d3038606c596fb6c2177d1075f025437","first_seen":"2026-04-22T18:23:33.954974Z","last_seen":"2026-04-22T18:23:33.954974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:20.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:20 GMT\r\nx-request-id: 8bf3d0a6e7d89096c200cd30ad43116d\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: bd5a8f45d073c72f50ebdba607f7d393\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2eL7927pZYTyol--iqdB5GJDfDs689b0tl63wRfdZRT4TMD3O7DY3A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"524152c1c19976e8b53ad2a4fe39e0fe","sha1":"a2c635d8236da2f501cd8bd5c05e66f589ad3d71","sha256":"b359532dc40e6bc30e7118e83588432ca0bc85e5981a993345a3ebad8d0a3c76","sha512":"bd580526a74871ac679a7c8dcf75f89bd8e991b80acc959aab1007ac07a60e21b8250e6c5802585756c232135630195271cad6dad03a271b63d85112bcfc44d6","ssdeep":"","tlshash":"1ed0224aff081279bce01090ec558a305a6c298508439b03a2ef5c51a7d5bff7b1ec3b","first_seen":"2026-04-22T18:23:33.955878Z","last_seen":"2026-04-22T18:23:33.955878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.23","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 03 Apr 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:76:03:0C:93:D1:CD:E1:B0:EC:46:C0:4E:0B:04:86:E4:80:3B:93","sha256":"20:3D:7B:D4:00:D1:45:86:5F:27:E9:99:0E:00:64:64:58:38:47:BE:A5:CE:E8:D4:04:AF:81:88:25:F2:0A:01"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T22:21:19.915341Z","times_seen":18938,"resource_available":true,"data":null}},"time_used":1213,"timings":{"blocked":463,"dns":6,"connect":209,"send":0,"wait":227,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 6b05676cef0e29cf8bd9e689c5df6bbc\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: f8543b0b41c6d99d45217c189339685d\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: LSlpyGegSahQafS44fElMwGeWiNyR-hIoB4K9npX0svp7RR8lTMm1g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f220df5514d59239ffff965ccf6b6ed7","sha1":"bed96321276258bbf4bd566bdbdb2660f2e1af33","sha256":"ac3de9acb39e05e07178da70f5bbe9de67e6a516d27f7068756e80d8b084110a","sha512":"17e776f35fd7801cc0ee2c292545118a10e560949c51c6dd006d62b16fb1c8d9e08ea13b07de7ed43a32e71e0a22604dc606d0d16a240eee15ba9890bbe55d71","ssdeep":"","tlshash":"97d023247b040bd188626180f8457f6015fe508544c70e4657fd5c0112c51a57b1ec3f","first_seen":"2026-04-22T18:23:33.957475Z","last_seen":"2026-04-22T18:23:33.957475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 868d6b690110f7ace9df24cd9f54739b\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 0658b4acba0896ece795ff0cd66115fb\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ez4A4ZaOFfBs4m4c3VpUFFvXBYfiZmEviP0ZqlYBHt-7I0vjeWtXFA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4cd70290fd4d11bdcabc05ea7a246abc","sha1":"2c49f082b83a219dbdfa8e91aae0458197efe2d0","sha256":"2fa8447f59643dae2f8f7c70edd346c02bf5c4f959aff1d8540b14a138ab3d9d","sha512":"759bc5d5829501b7301305020f771b5310181dd284cbd32cc8d2a8870f705dfcfc41b3aac913e570c65be4b749fb9755f1aabd927af7f6ac2e4bdb6f1a753dd2","ssdeep":"","tlshash":"4ad0a94aba081228aca01091ad968a305a68298508838a0292ef5c41a794abf7a1ac33","first_seen":"2026-04-22T18:23:33.958392Z","last_seen":"2026-04-22T18:23:33.958392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":246,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 206\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 1a5c10e5b34e69f0f080530398d04fe7\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 9a2a7b06796bd08fcc80816c1a08c631\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: OSNKLIOvp0b6u-tn5NZpeWlfZkVMa04IbaB7mTlGjZLO9czC9Y4x-A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":206,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"107702f8dd903a58fc0800ff14b8d27e","sha1":"35891e9b9fa5722b3034ff84f98e88180b9b32b1","sha256":"fd6ea5ebf32e1745b4c6a894a69fee978434a3b940e00d88ea2260ffdfc1fcd4","sha512":"55744aa19734b4bc514c1dc8151b8386f698c9738bb18d6ca763cd4bd256c296525daab305517698dbc9a2825abe0c291fdcaf46cdb39d0407347080772f24af","ssdeep":"","tlshash":"77d022a3fb0093d0986032c4e6655920821c2a4b10ce41c283ef2a50218b07bbc2a83b","first_seen":"2026-04-22T18:23:33.959286Z","last_seen":"2026-04-22T18:23:33.959286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: 5b46b75d0efb0e4bab7be2dc1ac5452f\r\nContent-Length: 47\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"entToken\":\"5b46b75d0efb0e4bab7be2dc1ac5452f\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://kcexx152.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1776882186850\r\nresp-start-time: 1776882186853\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:06 GMT\r\nEO-LOG-UUID: 2588486603423456894\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4220952e01ca5444bba3f4d3b1f31aa4","sha1":"cb3d067bad23ea150c4324a9e89e6f3508978375","sha256":"54bf5dc52539fc227234ee97c891b0d981976dc98843e8a6f447f2985e550a6b","sha512":"670a203927297ddfc0104873db42b41f425613c6f2cd7496bfa345e20a8b7dce288a9b8e9af7ff265ae56f69a8fec36f25a0d8b2367ad7a2abb57d043113575d","ssdeep":"","tlshash":"c311899389f44aaa5f2056cc4608952ad49fb02f0ec0ebfed9117e448d3f3a90bd539d","first_seen":"2026-04-22T18:22:44.116368Z","last_seen":"2026-04-22T18:24:40.176034Z","times_seen":8,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":0,"dns":15,"connect":19,"send":0,"wait":226,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx152.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:07.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx152.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nReferer: https://kcexx152.com/\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://kcexx152.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:07 GMT\r\nEO-LOG-UUID: 4622983874505348950\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T02:09:29.621508Z","times_seen":14083418,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:13.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:13 GMT\r\nx-request-id: bd16db4ebac1e2087af977914efe1df6\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 6573bb501df0eaf187a1f3fd7902aaaa\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: jTH0BG0Bcf24N3RJ46paFbbOALwwmXB5fhr6ZiF0PgU84MN0739UFw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1b609156ba39f7231ea3949ca4b139d4","sha1":"849022117144e0daf21a35b998df6204f0c59615","sha256":"6ec32788f564e6173391e60aaed9ae391697be968186359cb484c351912f1413","sha512":"53fa57ed0b60e42c1a44c3120f25dfb406436c955ddd040618cc1d6b2ec7ee754b6e39694839cc09bcf34353201fa6cf7f4d241e8421a1d22e060e38947d766e","ssdeep":"","tlshash":"e6d0224aff081238bce010a0ec558a30566c298508439b0392ef5c51a7d4bffbb1ec33","first_seen":"2026-04-22T18:23:33.961174Z","last_seen":"2026-04-22T18:23:33.961174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:20.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:20 GMT\r\nx-request-id: c56e6b47269918fa4cfe3f04272731fe\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 7ab6d0e0de54b0dd4c035e29334dac36\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Te-wqIJCQdPLSM-Cgkh9lmM3O_Fe3sJU63a7cYvFRpS6BnEBu8kn3w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7f50c98c289bdc2ec92074a5a3d23185","sha1":"56bb389814c340f2c50b449cbf87e6fb184bf5e4","sha256":"0608a4e7a804722095de0f2b5796563c0a0140e11d39b060ae72884ca4a7d5b4","sha512":"42683489d70b45687c8fb8f685531fa48df1b78809079d958b0689ece3c744c9c44d86c6cfb89519d74b568287abeb19795817fd26abd10ad9e38d88899bb19a","ssdeep":"","tlshash":"66d02320bb040fd19c5312c8e9156b7045bd35ca55c3094673fd5c5111c51f8bb06c3f","first_seen":"2026-04-22T18:23:33.962061Z","last_seen":"2026-04-22T18:23:33.962061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/5f87391dce40926.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/5f87391dce40926.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-91a\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPWd9pmsE%2FMrzrN9iavcEKEyHqqwt%2FKH3w17uoCWqtSRv6bzRgQFY0r6FN1VxzlLtrxbdWkNPEj9Klym9pE6OF7LRO5tKm5LniPn9CYx7KbbBLDt%2Bn25qu%2FuG3x0VEg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09c15694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-04-22T18:24:40.18425Z","times_seen":15857,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home-p-medium.svg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-medium.svg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VIx%2FiwjSu5xa%2Fpb%2FrcrF3BzLgzaoVHKKS%2BaVF%2BVSuQNtdlBp1G5%2BAxg5cIwUS00HTNqgTJyd3rKHIdvW6rJPHeoz0lqzRU03biwPDJa%2BYrFa7ldzSZCd87t1jOO%2FDXo%3D\"}]}\r\netag: W/\"690a1c3c-3f7\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a85a29e35694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf0a868a55e55325345883fa63a26236","sha1":"74bae04091f5f40fdb574a1897ee28b378d64e2c","sha256":"733cd7bd386603a6c43c560e20c379b0e98183f17348e37ffa0017f7dd478ad2","sha512":"53d7403b5acf323f471fc88cbb4a0d3c98028f018590eda7166bc2520adebc3db36f284f00c5c320fc632afe5451bddccdaec3b58c2e5d1da59ba49ac336ae1b","ssdeep":"","tlshash":"9d1102e5235de9fdcb06df8aa639d8287446b0b5ae3fce0a13dd2c85b40841d38c0099","first_seen":"2025-11-27T17:09:49.599129Z","last_seen":"2026-04-22T18:24:40.171002Z","times_seen":17,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vuqr9%2FXANAQC0VxnB7c674A5Ik%2BlkZs1069h8SPDIs4yA4oVrfjCdsPuswbkTyvzQ9dh1N54cK6uqC5StY6jvxxtLnS6no4chlZMAeewH1d%2FqahxJkRKZkxLNqQBZxw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a29ef5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/js/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Jul 2024 23:07:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6699a027-14938\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=os03cmEQWwBXWHzzOOAOeGJqnRb72haZC8J0Yw%2Fy10jNVyASax3xqMLFUscQJVvTLVvB%2B1cvEj%2FM913vmU0mwwIlEpo2XTYaANSA7cy8WN7%2FyZdWfKSJaNal5Ge%2FXGc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a29f05694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84280,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-22T18:28:09.598179Z","times_seen":9905,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:18.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\nx-request-id: 766e3f087a33b3b4a4d8da1a45ff3648\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4bdc905b3d32ded7e2a72145d1c4acdf\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: SBTXl7klFIQYYpIALn1BQRcnaD23omrlBZH_ooLeOgucHajXf_FmvQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f567e8484c57975af2e78074d2fa34ee","sha1":"12bdcbcbbd736db00e3504f31bede7cd2ce73a23","sha256":"c446e857ea558a1a5cff337a3bf62b21a5c8ee9194267ce7cc3e1a4f66b5b651","sha512":"7f7de83ae52d5f964d7c9a3d2f3489222fc496288a1ae293adec2fa83a033e91fd188f968700103531e4710621bcb1804d8fa6bb2138dc9c92bd21dad1d06390","ssdeep":"","tlshash":"ead0a789ba9405545c5432c995591e32b6452749046f455582e948922584079f41ac36","first_seen":"2026-04-22T18:23:33.965077Z","last_seen":"2026-04-22T18:23:33.965077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":718,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:09.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 219\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:09 GMT\r\nx-request-id: 31519ff3e431ee9e70cf12cc3f3047fb\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: b3d31ea55612183989f1d3d71cbf3187\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: fwDJ7f1_ALJfCOqRoxmqu6CqJroBivTtwhOgs4bEGiWzd5A4TSQEoQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8dc1c6513b8a4b7c4fc48bc5db746335","sha1":"2a9b0918b80cd4bacbf8ab7ed6e72735002152fa","sha256":"08834dc4a67243a78363028a2c5bd6aca58e33abb7d1db131fd5638a2198a468","sha512":"81a57774d3997de621b11b39153aebcd0b1cf555f86f895b5d8662ff98f7b2c0cdd0d454bc475c261b31bc678006935ff8ec9561ed7b4e020ff8e3a9e467aa89","ssdeep":"","tlshash":"e6d0a796bf1405405c603284a7552d2095581686456b41564afd0da215c4179f40f87a","first_seen":"2026-04-22T18:23:33.966253Z","last_seen":"2026-04-22T18:23:33.966253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119d72c-1339c\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SyrtS8N6Hkt3FpR84itqjyL%2Bexy2lJbtoW8DKkenN9sLwUinOBfem93XAbVB4ZRRDXPG2wzGrIBOvREs4cqXCYCCQlqs%2F9qPa%2FRT0v%2B3qRmq8FLWl7VHLh8ra%2Bvm2aM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a29f35694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-22T18:27:50.069436Z","times_seen":7517,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=usdzusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=usdzusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 50e9c169ed422b0b4f16b5c166d0bbfc\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: d1155bc989c0399da1ef9c26b5c3fb37\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 3ijK60P2s9lUxEEoyKMSG5OJopXionfM7ZNq-X_cAT3yPuugQNkNtw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5fa568f12bead77cea33a129702a54bc","sha1":"47350e6076848b437ef8a56c54d16fc56c278c56","sha256":"ed903ae9234c5c28fc754901087c2a089f3092e056806c18fe955ef55a9eec8c","sha512":"92445c94ae3ea198e8bf945fde1da11b7ea8873d1b221fa50159f2dd499f42dc5505db5439ea073f8b98ad2cc506ba1480aa52d6f6ea7bb8fc8d67658ffdf690","ssdeep":"","tlshash":"06b012000b9f063f2d9d404c22b605110ae884c431f5014015cc506084decf1af05680","first_seen":"2026-04-22T18:23:33.967816Z","last_seen":"2026-04-22T18:23:33.967816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nReferer: https://kcexx152.com/\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://kcexx152.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:06 GMT\r\nEO-LOG-UUID: 8759042336222575283\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T02:09:29.621508Z","times_seen":14083418,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":41,"dns":11,"connect":19,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\nage: 3510124\r\nx-served-by: cache-fra-etou8220176-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-04-23T01:43:10.086058Z","times_seen":22671,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":59,"dns":1,"connect":29,"send":0,"wait":27,"receive":8,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:15.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:15 GMT\r\nx-request-id: b3822d33853c5c7a34f2e408fc7d72c3\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: adb4ca4a5df514e6080be33affb18c78\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 5Qs-8NXklqznpWbEvlVtkVfQx70Jj-enjXYOWPWYvk_UQrI-OeJkaQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f0b3b39f7a022df1dcee7bbdd8ef5f99","sha1":"e5e315919cec8aeab774e3a6116cd0908797f6a0","sha256":"14108ab3b67a5b07eda60b5568a2246a9ad102605ed8e71421db946891978216","sha512":"06b89d89d1a8c7bde723696e21a4fabd708d66127d789632d8a1dc4548f09d1d2be1318dd6885bccef3cc3136041441fc2f68c38030099e7a11593e286396678","ssdeep":"","tlshash":"56d022826a0c52f44e9413c8e8641c301b59468201878e42a7f94b2021e04b6b20ecbb","first_seen":"2026-04-22T18:23:33.969277Z","last_seen":"2026-04-22T18:23:33.969277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:22.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:22 GMT\r\nx-request-id: bcbf64f923a657b763256b7b7e374f66\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: a4832b3fb353b3dd94d283002b4eac8e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Jur-Zcy_JJNVIBXTcWk_hQeZ68O4gm5b9DsduldXWWOK2rNkRJ3TyQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"79d8fc7bf9fefc7992de53c470e9d735","sha1":"294ee5b787a659c0a5adb3a1e76ea691a2de5d4f","sha256":"865294c63374c1005d01668eca583ccbf1394f67a629f0035d920132aeac9e3a","sha512":"4301730d267f64c720c027c33bcf8a54dde497a966e449b72e57ce440e803624267ac14a21907579c4fd703b6f4a384fd73f6a734a2f1f01408ee281dfda18b5","ssdeep":"","tlshash":"23d023517f41167044d3b5c8ff155e54966753d301c54bd6e6fb290133d10a8b025867","first_seen":"2026-04-22T18:23:33.970254Z","last_seen":"2026-04-22T18:23:33.970254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/5f87397132a8b02.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-998\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPqidQYpVEBVrVBZaIYcrnF%2BBvXnLVwrpB3nwDdRT2qSjJRwRpJJtfqItmj7mEsooeUn9bze1FlGy8WMeSbCSKzIkyQPdyk5Ra5OAS3Tg%2BOnGL%2FERX8gfnDH1kXv04Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09b85694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.849739Z","times_seen":18061,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:18.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\nx-request-id: d17ad17252b30c5eec43da9ca6f2d2b5\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 835939a7b9de41482fb814bb945e5f0b\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: qj0wAnt9a2vvkGzUVCrGk2l1hkVRhTjg5i_bC_wwhajF_pKU_7OUfw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a8f2c9106ba795fb5c06fde3c9af8bd7","sha1":"2faee1ea8fe351656969371489a5cfaecc4b44cf","sha256":"8c37d345f3581e59b7f8023c96ba462dad11ac0f5270ade70e123ef901af2775","sha512":"d8204721f4e5b4fdcec917151f956387e2681c7d208fff9a26526f043cf39d999e06c80ea622c1c99526170aee89d65bd92c9275e2e4f09f08ba209c6150fa09","ssdeep":"","tlshash":"efd023a17f50155009d379c8fa1e1e10d6591797038706c596fb6c2177d1075f029437","first_seen":"2026-04-22T18:23:33.971726Z","last_seen":"2026-04-22T18:23:33.971726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/1613786496962262.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-a83\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TR6AELE7772t%2Fymi1JA15ywn9U5OgpNxHFROxsNQlq%2BcUrEQATCoPDVudIgbDaK5sXdokRBORZplukmcy0t1q1q8iPypsJefycEjv89MIqK9r8Pd7RrvIC7CBoog%2FIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09ac5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-22T21:20:06.772271Z","times_seen":21103,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=htusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=htusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:07 GMT\r\nx-request-id: 18cbdd6dd2a5dce0e041185bcb65b62e\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4888294085b349e9a413c148b26d1939\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: m6C3pn-10fV9WIxZMm958LQu8ksoskm4O0mW7-49XrPACVe0lOVZfQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5402da26f2a5e0b15bc558de0a5ff76","sha1":"d63975393acf579de2b48876c8b93ca6b4247977","sha256":"3c382ea6c3357d9f85ef3e0c8ad344e02bafe6d75358e64f8d600541a4b56226","sha512":"459f2217a5d3edb29abaa7dd8b927678b7bd7e90f983c7a5bb30c250c8bab726f816409b5095e4779b9971e487102a219ce31feca79c73de9d853dc4819c56ac","ssdeep":"","tlshash":"c8b012040b9b053b2da9404921b6051206e884c031f9464015cc442485decf19a15184","first_seen":"2026-04-22T18:23:33.973469Z","last_seen":"2026-04-22T18:23:33.973469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:07.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kcexx152.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 4\r\nreq-arrive-time: 1776882187653\r\nresp-start-time: 1776882187658\r\nx-envoy-upstream-service-time: 4\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1894\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:07 GMT\r\nEO-LOG-UUID: 11414751537335646119\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1894,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6193b180c937f27cb174d60a54780ae7","sha1":"bc0b6b03a8f0db8235f09d122bc861e7e221bf35","sha256":"420be45bef67d8c9d58b4fcccb6fa2faadf77795f069b0ff241bf14660302d54","sha512":"6e113d3c0205d20cfae7c7da570f15ef25cf5d4eca287eeefb6f9a7bc6240f87293b9a32909a1082839469e95a8a085ab2134463ab8fe1e7653051db8c36cc22","ssdeep":"","tlshash":"214102451082ad38925ef68dd6e9b905d55d304bb5c05f22d7f6cf1871cf24e2b033a5","first_seen":"2026-04-22T18:22:44.108489Z","last_seen":"2026-04-22T18:24:40.205158Z","times_seen":8,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":46,"dns":1,"connect":19,"send":0,"wait":233,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:12.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:12 GMT\r\nx-request-id: ef1a605541cf717ca6515e0789b4587f\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 95c0d7cba9ae56512b25848811eaf5c6\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: pQkRJdB2LgNaNtRL9awXzx3jgyvWBwMGdu8lXw-WtnrLppX6iBlnHA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"acae50cfd7f8a6204ac04d73e34702ae","sha1":"773efc43474df384f2e37eba6e560b89327368d0","sha256":"8be4b65f8654f75d00dd50c89989630729008368163d98440db1063e7d06e3f4","sha512":"91493da1fdcd3724d0f7d2a7b73c279cc5215efb84cffb3c609cd6654fce1fc408219282c072197d31525877cfcd3b4f1993720ab4e40e03e69f487adde504b4","ssdeep":"","tlshash":"e1d023d27bd0a5615452b7c8b5b75e71c65d17b70085864653ff2c1037c407ef429437","first_seen":"2026-04-22T18:23:33.975163Z","last_seen":"2026-04-22T18:23:33.975163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:19.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 204\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: 3f81cc66e119093b3c877b3f28c60c36\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 0876fecb8e0a0e82fa622b1cf4386207\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Z6vQ4Z-XlspMV-l60Z4iYs7NgzfyI-yBYLMLWlJo4i1KVvNn-jgYJA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b21f06da1c4250038a7a753f647e18d0","sha1":"8b39e9078112ea1ae7fcc10d8c5d9d9d683bd198","sha256":"fdf4d72ad35ee335c4e3d3eae259d9003df352e34f8d45a215bdce9fed4e134e","sha512":"c7dc327bd3114761664e48ad6dfd6a3c5b71f08507d904619c9e3e85490d81ea6c5b2bc67d10868126054fda337b73fc85f2d1c46cdc1fb919933c2b945a62a7","ssdeep":"","tlshash":"48d02244ba8411c248a102c8ac204ef0668d068100834d8616ea9c518ae8271b80d83b","first_seen":"2026-04-22T18:23:33.976106Z","last_seen":"2026-04-22T18:23:33.976106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/js/axios.min.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/js/axios.min.js HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Dec 2022 08:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a4173a-7467\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMG07Q5Au5x1V8KbkNvpEUTMeMUdkJrpZPfo3HNzANMBAhQ%2FB%2FpgcmF5J3SJ2se4Cy5n6SzCZd7ZLl6kFZ4zJSnfz22LaMzhDln04SAtuEJuDvl0kAoT4E6ue6j1zNg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f98f5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29761)","md5":"58835c3f08ef2a2018ac37b27774fa2c","sha1":"e7a35a9106953bc41a4290cc8461c52612ea4379","sha256":"d5fba18e5f50a6f74db552765e4e256d2f4a6e9b46c2234b5e07f3c63fdcec28","sha512":"ed99a7f144d3eb0df27d5f26027065c985f90011a6fa29b821df2e331e7f852933173ef4074946a33e1e42837c67348d0e69e25de4980ea451657fc8fcc60dc6","ssdeep":"768:KCDyBTI61NNOlU1HI0DL48QDLAxH/uzEZBK5lilUpb0:ctND880wH20W+","tlshash":"a9d2e8c8ba91b071576771b5406f250bf23aa926e48dc490f130e8ea7cb850e9767f7c","first_seen":"2023-07-06T08:57:57Z","last_seen":"2026-04-22T18:24:40.18565Z","times_seen":477,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/doge.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Nov 2021 07:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e304-838\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FiGHjp3XWxE3jOBnR6Qj6Aew6ymoPPuZ1mimAPcC5wPtJvojMTKKs40Xr%2BNaRZ3m3J2YxZY11Vgwflcr9npe9B7h36t54gMilCAeOyX8dDSbXD4SQ7STsd556Bv1Q0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09b25694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:50.076588Z","times_seen":5331,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home-p-telegram.svg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-telegram.svg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3d-42d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ul%2BbozsXei0GKl4ltY0V%2BcDF9ZAgi370HVotTfx4qEPvRSYSMUqzKRO4Z9AVKN1l6iOcrAs6R41PHFjUxcpkC2%2FfdHqkpYvXp1sZYvpr3fApny0gfUWxzmldgI9dmxs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a19dd5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57330633e16609d898b2e0a33ded01ee","sha1":"f14c53f1bd8856aeabfd681294e71606376adc29","sha256":"941c5903fa6905806d2b660971123513dc8df16dbc117835be3f4226c2fc6195","sha512":"2ef025a3b47b358429cc0585fe1e4ebd3b08bb6f9121be433ea54e10ba65531d1598efdad6332205434ce0e08ec485bf12ef161ddcbd81a2f661b3223bed21a9","ssdeep":"","tlshash":"ec11fca0a6efe6d0904ad3b4c565a5f779ba35ff62d1dd4a829029d0e61209d6008d80","first_seen":"2025-11-27T17:09:49.617063Z","last_seen":"2026-04-22T18:24:40.219319Z","times_seen":17,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: a42a1277b8bb94b0c01b62b91e8e36ca\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 018dded050bceb2be639008843a46f2e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sVp-_7BfZDt9Py7BkqgrPKTAOHfHPQ_qcWSCCf8304JmWI5M0xf1MA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"961a738acc212cfa1a4b77b7a3d6c0b8","sha1":"96edd82422108e8b2d09c59d4753924c8cfa95c0","sha256":"7a9cf8daee74c2e1b9bdac19ba9150e3e51b68484c6a264946975b2085d51fb5","sha512":"a26adc4a80b92ee2907e6911aea10770af444e067b5297ea1ee3baff13a26c95d59df57761586be67482ecdaadbdce188c681a61199ee21f87d0805f246ec082","ssdeep":"","tlshash":"00d02282aa0c92e84e6917c8e8a41c601b58568201838a439bfa4b1061d04b6721acbb","first_seen":"2026-04-22T18:23:33.978529Z","last_seen":"2026-04-22T18:23:33.978529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/3.mp4","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/3.mp4 HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 121640\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:15:11 GMT\r\netag: \"690a0a6f-1db28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 40\r\ncontent-range: bytes 0-121639/121640\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4NN7mVIXX9MexTDDEMP67whQh9oRtd%2Bs36SzDjg%2Fa97ItHufQDvTxKzAuZBI7h2jzg4ZPN8GNB%2FFRqyLv0S3QcYWiU6XUFB2xXMrtaHgMNj2f5Vd0cXOuq%2FoXM07JE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85c9cb25694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121640,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"da3ea4a39c2859ee768f761a9e0be05c","sha1":"034a64a707d6b555f4764c0d1c9a0001d3e7c5b9","sha256":"9116095e316a6990fa66dd78fff172f068874d982536df3ccc5bd2f9e418ac5e","sha512":"b93873599b5a076ea4de17eb6e194a45ffd1be02eb19cd6b5022ef4b7e928df413341924e37758e6c095ba1e6037c9745cb1eb244cd32efafc6f851431f8f577","ssdeep":"3072:a87rXai5wjTncEtCBYNliaZtHlowthNZb6iAMK/eHY:j7jIcEOYWafew3NZbAMyeHY","tlshash":"cdc302926732b02fcb5a71398dea2354f631ce226b834b4f8385a176dc827761f5644a","first_seen":"2025-11-27T17:09:49.570574Z","last_seen":"2026-04-22T18:24:40.200273Z","times_seen":9,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=itcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=itcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: f6f1115b18c92558671f63c0204ade25\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 916e4cc268bd611586a053118aef24c1\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2-KV_2kTBiF9KG3wiXRoyCRdivXCyQvGIijV0f9baiNCarwJ5PWGew==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cd78216bbf06dc3e6659a762a0dfe2b4","sha1":"4f7d1354e2d217853cda109ae2b9f27dc409c8dc","sha256":"48ae26e89109658af07b0fc2ef21438ebe824b2ac9a4ef6dbfd9476dee2983c7","sha512":"7152c41be8db6d5b7334f17bd2879cccb4facbc43a222123b9077e1b63cc9ad785070c794ac6a46f44b35cd1528b45a0f55a21d7476f958265fb9857ff292fca","ssdeep":"","tlshash":"41b012400b9b453f2d9c404823b6051206e884c031f6114015cc406084decf1aa15180","first_seen":"2026-04-22T18:23:33.980313Z","last_seen":"2026-04-22T18:23:33.980313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:07.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"6FD26749D6CE6D2748D4DA4E2461C61B\"\r\ndate: Mon, 16 Mar 2026 09:46:57 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D1916FBB5238331F7A9B\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15743163260591507650\r\nx-oss-storage-class: Standard\r\ncontent-md5: b9JnSdbObSdI1NpOJGHGGw==\r\nx-oss-server-time: 12\r\ncontent-length: 352652\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2156005409777660143\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1196802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef54ccd776c571950363824ef49047ad","sha1":"7cf2fc955baa2a734b4c5d5a1bd08b4622c69757","sha256":"f19803966bdb401b6f4f9fbedf9dd29b932a92513f4c3daa133d7fa2cecf805b","sha512":"a861257e6fb5bbb8b78ac5d9acbe89b07cd32be9301745c039aeaa3c1de9590db4e6a0af715647c0aea75fae72e561f0dba271a29d877d608aca81c7929fc08d","ssdeep":"6144:mLPtqVxPp7Uy96XStztkazQeBX2bbHzsHI5evwlTUMoFOFVwvgG90YnsUqbeWpH5:AVciXSnka9BGfTsHI5e4lARLgGqgs","tlshash":"c22539cd70c2b0a207e361b5403f100bb33a6d69680d5454f665d8dabdba98ea237f7d","first_seen":"2026-03-06T10:13:01.515406Z","last_seen":"2026-04-22T18:24:40.178333Z","times_seen":201,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:10.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:10 GMT\r\nx-request-id: 49e1cf031d9de027be29ab319f98ac8d\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 258cf75c6ebb966924a785058a7979a9\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: saqgW2Eb_WduEocLIVviSJA6bnyV_VE4iFGIHFmH4qfmOiFb9cjfhA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5c37aa15ca8fe8a0a07c631c3ab463ee","sha1":"a7e2e4676855e3a404994092019775ed471ceed8","sha256":"440ec16fdafa41aef608dc108ad0808597e822b749fd42d5f676072ab008b5ff","sha512":"ea15224034ba59832d1559683137c32cef4fbaedd78773ca372dfac7948028d54864c7850d863553ac9d718ff473b30f788d1390744bec5815fbcc466dce6127","ssdeep":"","tlshash":"44d023c27bc099600412b6c8b4b21eb0c65c034b0081c68243ff2c0037c403af42d433","first_seen":"2026-04-22T18:23:33.982102Z","last_seen":"2026-04-22T18:23:33.982102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":726,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home_banner_4.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_4.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 13:52:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0527-33f3a\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pmkLqp7S%2FKLQ1II1O5iHkt2CRbkhfA53xOtAVwFhZ8nB5JZ3QXKk5Hlkfwxe0MscW%2B%2FMZ3zieuNAyevV8f79l6WiVkFWRbIz0jvDe%2FEaN5WqwktOKgxFouoRmU7AHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09a75694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"8a3aaa5b8fa5f612ac5fd8547aaeaacc","sha1":"b585b36dc300791222eb5ce2ed3ef2d90be5e454","sha256":"a030f67fa95a38417accbe2267f9fcdc5df527e5319b38aed8ed7067a2f77170","sha512":"01e7f1c94a9397249c8b8c8012e891b1b903a7feb7c854008c0d3f8db424338657b41748c5644a7e53131525f79a7829c55d88038dae2dade065cd0042d1da74","ssdeep":"6144:g4yfMK8imcx3+S9tiND31qrUchVBxWzE2i:ryfci14S9AND30rUeCzEB","tlshash":"11240240db518573d7d68e95db160a82c69e723bb80be85153e7270b399bfec2d30d88","first_seen":"2025-11-27T17:09:49.639231Z","last_seen":"2026-04-22T18:24:40.205703Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /sjs/static.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2026 21:25:17 GMT\r\netag: W/\"69c3013d-38a0\"\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:20:07-04:00\r\ncontent-encoding: br\r\nage: 178\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9f06a861ce151a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-04-22T20:49:43.793179Z","times_seen":612,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":23,"dns":8,"connect":3,"send":0,"wait":8,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/newRightIcon.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/newRightIcon.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:06:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0882-2d41\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iN8ffVEVQek3YGyd5x4Wungi2Q5rOWhRcf6Qqx5CvW2kczLUxkLQ9lmJpejoaOoSpD9F5JpjVbx9bsmZLe7bHbHIS93k6zqnM1mQwXG2QYQhJFD5C1HehVC%2BoKZqcjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a19cf5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"96e4769861ce5565a50935bbe285fd5c","sha1":"e51fe566d9369debfd55a973d39cf2f29c6492fc","sha256":"a3e4896d5a7373c665571aa137b65e66221a37d3b3f9f80cf5c4a41e1f62c8fe","sha512":"408847c66d006ccfbd28b0ecef7bb0866a92d7c7be3bd75fb4879a69135b8cd4ce4a9614e4b3c72df2e7a55004b2b8b9818ebe039c244e69ea4efb8d5332ed67","ssdeep":"192:3mgLOMcBcy7nKRpwr4fg3fMeAVwH2i+9BoqkLQoyRCN0cjJoUIzKP:3RdcBZmfeAW23eqkLwRY0SOyP","tlshash":"a832c0e22f3c46fdfb6701191dcb989962bc9d0f2c81dba498c110bc9508accf46f022","first_seen":"2025-11-27T17:09:49.60618Z","last_seen":"2026-04-22T18:24:40.220425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/css/base.css?v=0536","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/css/base.css?v=0536 HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 31 May 2025 06:06:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683a9c4c-642d\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrAYSlEzzMyfNl6wqQw8cVlpgvcGQlYPsWPL6gDdOMaHXVi8a5aO%2B3zzQcaI1pdtaBUkaFtqFG1PLqLUzvBeXT5%2BlmPWfvclvj3lFQTh319Dos1218PSUMrEKxki3tQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f9895694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25645,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"13c4f8a0e9a328b2735872b476acd8df","sha1":"a72a2292319e32d176e27b679f87c40ad25c316e","sha256":"2131e86e30c4207121fc669063f77bda752091ef574ac06deb5fbfdf86895a99","sha512":"1fd11190bcde80daa37375d29c3463a1fd37df7b4473f32c475163e189e066a01daa73cd66cbc98c3f828936829f6471628d79364e8f67b26cc5493d3356f65d","ssdeep":"384:fpFiO2TjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBE:6RcN39FDwFx9EZS9YzqtRB8TF3MD6","tlshash":"3ab295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2025-06-28T11:29:49.125948Z","last_seen":"2026-04-22T18:24:40.16651Z","times_seen":45,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbkfFSE%2FecOyxZJ0oXvum5vhpHcZQm2a%2FXW%2BV9b%2F%2FLBUZW9DbiRBq5l3GbS6TzxPTt1WBDJtqggIsoInVy5CK1eRyr6ewWEtJsW8SALOPxL%2Fh2p3UrMngeLjTMgenkE%3D\"}]}\r\netag: W/\"6119d72c-12a\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a85a29f65694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.052952Z","times_seen":6103,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Feb 2021 23:56:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6025c42e-36e0\"\r\nexpires: Thu, 23 Apr 2026 06:22:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apXATQz0jH5qDaYSDX7veLvGXGo2U1%2FQLwx7z5hfZRcQHKQRGIq%2BINUTB7g%2FD5RmJb1TAGmtxJZKhNoO45rw56ZJRn6Cs2NWsuosKjqV3ORk22zVOtga2%2BBA7AqzkZ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a86059705694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-04-22T18:28:09.609875Z","times_seen":3191,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /widget/loader.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 May 2024 09:15:03 GMT\r\ncontent-encoding: gzip\r\netag: \"00184F0A93D1F7867CDF782F3DF1AB53\"\r\ndate: Mon, 16 Mar 2026 10:31:22 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69B7DBFA104B5233392B5F8B\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14476346677076018366\r\nx-oss-storage-class: Standard\r\ncontent-md5: ABhPCpPR94Z833gvPfGrUw==\r\nx-oss-server-time: 15\r\ncontent-length: 5741\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 16243196493629142494\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16344), with no line terminators","md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-04-22T18:24:40.171544Z","times_seen":2552,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":65,"dns":1,"connect":28,"send":0,"wait":28,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1776882186979\u0026ps_l=https%3A//kcexx152.com/\u0026ps_r=\u0026ps_s=pXsGBOC9dPUGP7Ce","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1776882186979\u0026ps_l=https%3A//kcexx152.com/\u0026ps_r=\u0026ps_s=pXsGBOC9dPUGP7Ce HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:07 GMT\r\ncontent-type: application/json\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 25\r\ncache-control: no-cache\r\npragma: no-cache\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: Origin, accept-encoding\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:23:07-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f06a864af3a1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce33080b5c32e9a112da47c27b074f72","sha1":"7f8a374b0bef60327a18ab1fdd9cc459c5185526","sha256":"c69f9256ca3a89dbdbf2063f177728e38f6f5e2c383f01bd2aa84716aad4b296","sha512":"9281c915fedd5d977deb662f36a5b5b03ff27cc582921afb8d70cbe7fde501ca8e9d71e6be6a293453889fa9696f758057d4ea2d3bd371387f748e3e28eec0db","ssdeep":"","tlshash":"9390008c88e338ec00088b22ff82030ac3200caeb008fb08c2a00a0230cb3e82030003","first_seen":"2025-04-07T11:37:33.935595Z","last_seen":"2026-04-22T18:26:19.97631Z","times_seen":357,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:08.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:08 GMT\r\nx-request-id: e4561790b62e23efe38c0f25b415f1fb\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 7aa5163df276db1f414d31d82fcc7e50\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: APIj7FJNo4UVp1tyHZ8YxhlpeP7xZyDnNLzhPGrvb1p-_Ox-9S30gA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"12e86f24720ea9a2070f4b0f7bc099cc","sha1":"e5ee3e441286128f1ec31b438432f23e2d2b8620","sha256":"64e6bea8e3d88f66bcd4ff2173998f634c23c347f237d3ea51646a5ca5faf67f","sha512":"99d375227b183fe046c67c96960f65907e63b4326fffa3aee72462e862dd2f01ff9b278b3dabc6b2c6b3523887c203364e8409004f790ba0a400acfba1bd8830","ssdeep":"","tlshash":"b9d023d3bb80ad615462b6c8b5f76e71d65c175700828a8653ff2c1037c407ab42d437","first_seen":"2026-04-22T18:23:33.986846Z","last_seen":"2026-04-22T18:23:33.986846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:15.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 219\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:15 GMT\r\nx-request-id: 7978a9f4787d6f89ee93600491b866a7\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: b801486b30598b959e4efced2a8e710c\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sKFtqsLHXvTiKN8UJ2189opjwLSKZY5XSKAVsIrrejH53OMpMjX_Mw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cb25bfdb57852a2480ebeb68ee0e71e2","sha1":"1455d5196e6cb8739c3bb1ad6fdef9c29928c579","sha256":"d19635fb4034db1a4aa70b831aa0d830f95d3157c8d9259aac7842544ef89c80","sha512":"111fcffccaaa21adeb26d633b160386057f4aa1be72d1a7dca9e9c6ea62897bd8df939f0e8d9cc32d3a24f999fa902796f2eedf493b2ceec7025a6cf734583bd","ssdeep":"","tlshash":"80d02396bf1405405c6032c4e7152d20d55806c7046f415647fd0db115c4179f40fc7b","first_seen":"2026-04-22T18:23:33.988291Z","last_seen":"2026-04-22T18:23:33.988291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home-p-linkedin.svg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-linkedin.svg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3c-523\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZIW80b1EE%2FyzoD6ysXNKyqyARLHouc%2FD9poUNJpkRDoBfRNAm0UMdNKnAC%2FxjdNr0IXGuqfsanoIpxoqwSfP9Rdc93cV9j2fNREUywoSoY7SMFWAQ4uqS%2FtUmcZgfVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a29e95694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91cc9f901a7faa746e809d9ac862ecca","sha1":"18edcbc4ed6fcb4397cf9008eaa60a0c52c792fb","sha256":"d3f387b5ad7823a4d24bb708ab967e9ac9a6d0792080142904c1be5bbec6894b","sha512":"db07ae57475c1b89c544ac015869cb87dad1effcae153fd8cd11514388f43250e219694e7f5c4c7a8fd6c5b350d5ed538bda02969d0719367dc94bec7929c9b1","ssdeep":"","tlshash":"4b21d0bbd1f562e893499355aef53ca80b2b0bf5bb45ccc871cc0bd48e204ce9e45894","first_seen":"2025-11-27T17:09:49.577106Z","last_seen":"2026-04-22T18:24:40.207126Z","times_seen":17,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:17.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 206\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\nx-request-id: e45c3da2d1369e58f80360047453b167\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 048d3536ab1ee807e6ad082af4bbf2cf\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 4URS7eNh87t2P6soS5Y8VxJpv2oJRIjWx7rXjqXiWvJYHeKioyRTtw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":206,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"de8a445f7316cc2a1db5b1381f6a81db","sha1":"abfdfdd42215a2345f4ec238ea8b809ff2e5f25e","sha256":"6142d5ab1a52ba46cbfe81fec125b2e11d76f61151d494b6eee1c78a43018583","sha512":"a018a771784ef3df2a220b36317024ff0f9daf71640ced686c5365480c00b6ea500e0af6676ea3710eac2f468ba511c0d720c8a3018149d2ac79b4c4c8f5c674","ssdeep":"","tlshash":"60d022a3fb0053e0986032c4e6251920821d6a8b20cd41c283ef2a5022cb07bbc3e83b","first_seen":"2026-04-22T18:23:33.989861Z","last_seen":"2026-04-22T18:23:33.989861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/Icoinfont/icon/customer-service.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/customer-service.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Nov 2025 13:24:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b5028-f71\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58uOoqi1f71GPTJM9nm8iJ5B5nmzNFotcnB1SM8F%2FFz238ZaZgd1alT5xeVBSH0t6LiSlBnCrDlWHR2HpX%2BRiz8aaqyNWxEGXbeNyus7HKjEC%2Bw8G5ZBhgErqAh89f0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f99b5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"91a14d2d777d16708a29fa14fb8a6045","sha1":"6053d1e2f70f5e51f94ae307477442d1e8a7f3bc","sha256":"a0adef8cd9b4cd8664b55984519989b79e73d8809ed264b2ad15be40eeffcf67","sha512":"7eaab105b28879508b8eaee9bec2a80bf9cc10b94f328b5e528ca086ef9cea12cf72d1f01ffe6b2d4c6a76ee2459e9677e959b8fa46517a9dfedf6994536e89d","ssdeep":"","tlshash":"04816ca00d78831e6b720e65e7dbe014e52bc38582e6202bbd230dbbb4b7d9594924d2","first_seen":"2025-11-27T17:09:49.629541Z","last_seen":"2026-04-22T18:24:40.212078Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/favicon.ico","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:07.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6; ps_rvm_OiyG=%7B%22pssid%22%3A%22pXsGBOC9dPUGP7Ce-1776882186977%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:07 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 13:34:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=niHXQTl4q4nMWpTXLW5Obvq5yxfH%2FozKF%2F7RX6fcwaAkHJ69A8G1jy26eCtaM2PfkfGSNC2lhHzuzbkPraTqF%2BwiV7KPPq%2BLsFHVxQFbZwER31DVi%2Byoz7tgYOgkQ3I%3D\"}]}\r\netag: W/\"6908af65-10be\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a86598965694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d0be2f7f8448783b08c60ad569fb87c4","sha1":"df707c555a605710672661ba49489c5feb4fac88","sha256":"3be99507e78f836020e82a6736da194e1914038222bad38d9a3b071d15fede5c","sha512":"3f32814a45bc34f63cf9277a413930268397f047f4a6c8025853f1bc0c9300a830db16471ee94d0fc152d4a3265f3776ba2a99eda9e7c1f23ff8dbde127a2843","ssdeep":"48:7co9P3MQNNc5H2MFYAcvTPtODRY3EY3DHAqU04fi:7cop3fI5HhG1vZOD+3E0pU04fi","tlshash":"af9194e2a7012c0bcc2313fa3a36e6b2b3005e5d3112d31758f2fc2bb51b0862e90088","first_seen":"2025-11-27T17:09:49.55558Z","last_seen":"2026-04-22T18:24:40.213701Z","times_seen":12,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/css/home_footer.css?v=0536","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/css/home_footer.css?v=0536 HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 31 May 2025 06:03:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683a9b97-22ffc\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTFE0RDDmoLzUI7ylWfLAUv3EAKrOLfr5%2FPKpNxNPlrQJr1pG4P4WVYm4021t01xEAWGOwcK6c%2F91SL1ibMtpaBupt5cOUSsVdHUrFrBV0qlLb5NVfsKSkZ6j8VJXS4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f98d5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2242)","md5":"af93c93ab0cc62f64fc4663a140a41b3","sha1":"14329d2037f47474c290f54a7480734201ce56a1","sha256":"62c60d6217a2a1a65eac79040163c727a041689a9ba5b735b94571fffcfdc564","sha512":"31d333b407e5611467b16ea5995cc2465530ca974505b189fdbd39d51e73f46907132119845b21ffc4d8103ce9f1618f3ab72de8bee7bd8c04bdf028823abfdc","ssdeep":"3072:w0sMYwat4LHWeTITRYjWAQaEqqP9Ld33f9Ld33Ei+B3i+:w0sMYwat4LHWeTITRYjWAQaEqqP9Ld3u","tlshash":"f4e3534f1fa2f411e8fb0c6d06ef45155a29950782d39ca8be8c9eaecfd75484701b8d","first_seen":"2025-06-28T11:29:49.101234Z","last_seen":"2026-04-22T18:24:40.167049Z","times_seen":40,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 43\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7mPtAQLK2F4YbbLCLZIaNIxs%2FPYZik20hb2Z6azOYZFys2Arzu3tUxYPhkO51CipbiMOYXLbFPA5GrzXLEfSQIGf5zpQG0R%2FvYjiGhsjBsMLBYNvWe6GwpXImGt%2FZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a86069805694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:13.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 215\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:13 GMT\r\nx-request-id: 1ccb12b42819f9bcab47f3889920bbf3\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 65aa7dc9d4377ea6d833b0280626bb46\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7X-xl8nHHwyxvU3VLxJK2Fu0ljmtL_UgEd8rE0BrsjSTvGdCWVD-ig==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ba761b351de49a871d39a6915dd440b5","sha1":"f40561db74c6468f91460d26fb7a0edcfa671121","sha256":"1907cbd040cfc59aa06d2fe6a267f0e8fb36170a1ab2ea759d4be631f1ad0c1e","sha512":"f8d16d351a25ff6cfa728037d519dfe45bffe743efc287a579b6e8c5710608022c0cb7a575a5153c0f5407c520dff175b2ed8d5f75cc49c97b1a79f59a257d51","ssdeep":"","tlshash":"fdd0a9473b8412a0cd632182ec1229a27d18250650ca8b4b47eaac20a98a1a2f52a877","first_seen":"2026-04-22T18:23:33.992093Z","last_seen":"2026-04-22T18:23:33.992093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:21.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:21 GMT\r\nx-request-id: d833a7f411cb9bb7f6bdaec33560b32b\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 0fa787e4b4032ae6e32c24b3e67112d0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 12cshWmR5pN8_WPTIJmb8wMqNXiHrJgZFVtBgWAwbXrZ4FJZe6Mz0g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0ceb5e369e3d9b21f179e55ceef2f6cb","sha1":"5ed794cc4ff2625c339c66ddfc3901f486fc3d08","sha256":"8b0a3f09ef99aa2918289bd2cfc9b8d3913fcac6eff0ba96baf626c2fb8ff2f1","sha512":"adbffed62c3f824148016553f4d0d6249e71bfb8d88dd080e707a90fe76bd66e3852d5c0d6e12804b61632ba95d4ec9fc90d7f9c987068043963c2d4b86437b0","ssdeep":"","tlshash":"04b012000b9b193b2e8880482177151206ec84c031f5058012cc403454dfcf09a05180","first_seen":"2026-04-22T18:23:33.993024Z","last_seen":"2026-04-22T18:23:33.993024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/fil.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/fil.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Nov 2021 07:13:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e50a-8bf\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvaQ3XIIbKocH4MMg1k9wBlbBjd%2Ft4L5%2BpfX5JfBrfglWkfqAKd6KNAYkvoY%2BNhXiwHxv%2BWulRs8taQJxexFo45EBSyxad1t2iitvbn6XwH1wMyVTdPOnKhQCMjZkl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09c55694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"bc0baed91ad63da79ebfd092f42c76dd","sha1":"8a4f9cb9ee821242971e3f29a770e5078218bdf9","sha256":"ac4d8dcc1a755104c19551dcd96fbf097a93e529f86f540d8e0d55328c09a16d","sha512":"7cd155866ec8308b41049d32de0fa72b16dd774355f36ffba0f8256b1acaa2fe9fc5ae6695166f22c655aefe314b161d525f1cd8eb78ed746c3374905b0406bd","ssdeep":"","tlshash":"0e413eb67b9fc403c77f858708ed5e6544225f0a69248d50051a7e6ebd2f1e8c5915cc","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.931033Z","times_seen":3525,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/Public/Static/bootstrap/fonts/bootstrap-icons.css\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: font/woff\r\ncontent-length: 106812\r\nserver: cloudflare\r\nlast-modified: Thu, 30 May 2024 01:29:40 GMT\r\netag: \"6657d684-1a13c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjg9OgLQJuofTzUXjASJJQ1dYTm9nCg%2F9yyzyaUKb4zWV9M7m5CoMY8Gf6sQpyk7KI6IW5FXZ1%2BzNHJVgnwjVzZTHSyJMPTLHm3jfZvoJvXX8dAfFf3ysG5GrMkvQes%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85cdcf45694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:28:09.60369Z","times_seen":10291,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=jstusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=jstusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 1a0298f98b0a1b78c499ad5f6e378048\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4d5f00a4dcd87ec46ba1f905f7dd88c8\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: foM-1k_hFJZVrbwkTdQrFAO-WtgMGVTaNuXWQSPrTUHSQ8cVWPcGlw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b1464354881074dee3b1b44393915bf8","sha1":"a7614a44831a4ec967a0ea22ab8a58ecf739a810","sha256":"ea8d6583d7e64ec2a1a6c338cdaf79bcc30787e241d97ad437e51c7bc422c23b","sha512":"e8412f80be4cd2c4921d45195ed8a780bf133195b15423ac952e0902de316ff4db901d95338a81b84b1250f7bde877b2a52446238b3ee54f4f1a77a7d773e868","ssdeep":"","tlshash":"f8d02375df043df5087011c0ec314930d99957420441c00656ee4c14cb480b5753bc6b","first_seen":"2026-04-22T18:23:33.99471Z","last_seen":"2026-04-22T18:23:33.99471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/trump.jpeg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/trump.jpeg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Aug 2025 11:21:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68948c3e-12e3\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRqxw%2FfYs0PPlppd6svm8EpqvPvDKs0KcZDAM3ixkyUX2wy3eyTpxWzXfQAEwIyE6pCiogT%2FvHdGJu7nNp%2BHOj5CRfoBwjM33dO7w8Ycvt0PrzIUgxdH9IZlBCsHfR4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09ca5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x256, components 3","md5":"bab381c17cd333000cbf4386b1542f5f","sha1":"ed40bf33caafe12092cfbfca1d0512e3ae8b2579","sha256":"af420cf9fc2594bb7bbc2e81d40c2d234ebba6a7921ae66f410fed7063b0e033","sha512":"c2766268d80d3ce92dea42096cbefb7c6453f88805d78da01ab2fed9e4511f6f47cddf1ad4b6d0da14fcf141fc99caa2d062d4b12d7e2305c043ef89ad479213","ssdeep":"96:IElbw+iHVumHFufDbDHmHPypd9lq4nItnEFgCUii0xT:9w7VuUFufDbDHgmbl9nItnEFTUiJ","tlshash":"d0a15b4babd9164ae4704f34a17247649fce3922b85a1917c0c617ba2b7f8c71f2c786","first_seen":"2025-03-31T17:08:27.225722Z","last_seen":"2026-04-22T18:24:40.226222Z","times_seen":93,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/Icoinfont/icon/new_banner-bg4.mp4","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/new_banner-bg4.mp4 HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 491691\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Nov 2025 14:06:14 GMT\r\netag: \"69270956-780ab\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 40\r\ncontent-range: bytes 0-491690/491691\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oymhf7%2FYf65Z29DNdJlyLD9tooFwCRiBznispyKg%2B0O8fYefeuo69St5VHnQ2Jp50opcoX4IvdfsT%2F3K7GtK9kkbdJAqAqU6bRhOfmGekM%2BTC9pLSqjueY7Twss6uVw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85c9cad5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":491691,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"796e6846277d840027311df7480285fb","sha1":"76ec44a1d63b87bd0114950f8a555828fbf70bbb","sha256":"8ac2fa3dccc7459f7086fac2b547d23e267e94562ff5beae5e7b93c01a1c4168","sha512":"1d2e8f7309d703ab5bd597c7c42dababf10a4ec347c6ece2e281b67c392252eb246a3d6d34010b2eaa0842ff049e7febca736229d5d1fbe6f6d14090e3e59188","ssdeep":"12288:sZ1ja8fCh9dZerTqe0hiu3VFtV85Wo0rM/Tap55sVAkaOTMtTxDL:sfWyChDZ5eVWjjo0KTap55CAoyP","tlshash":"3aa42345a320abd4d3187b76d8db5b893064ca95d2b2936b0b700e74bd0a3571c3bbf9","first_seen":"2025-11-27T17:09:49.626703Z","last_seen":"2026-04-22T18:24:40.15498Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/1.mp4","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/1.mp4 HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 106025\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:06:37 GMT\r\netag: \"690a086d-19e29\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 41\r\ncontent-range: bytes 0-106024/106025\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrcEsRPLKWDw7oVM22qMf4ZzW7m2m05p7i8IpKK%2BkSZOF8AYM7g986rsad8Y83axjo7olkm%2Fh3X%2FgvvbmY7iN6kNX2Y5aizbzQtaZ95tJCNzwb%2FmKPJ9QcYB5IX3FrU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85c9cb05694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106025,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4ffaa7b2bd0a06af61652e6ab0b9d39d","sha1":"d37874760cfb26605cf651ae519f5de1d9df786e","sha256":"83d355cd527de9fa037fc2321fa56efc00fd54add9c9d9d8a9b000a272c5acd1","sha512":"cc9005cfe2b58354b356cbd92a68709b9e142b542a82b1d06df945c65c3dd6165d463d6fe8c38a2d423ba97f48df1e11e11f6ad14f78d8b3779f45bd89644e15","ssdeep":"1536:VuE1rm1vlIuf0/xSsfy8X6YC97jH8MBgUoWWZ9ING9zQey2Ac64UNre0+JDmopft:kv1NI20JS+y9eZUSHINHN3NreHmo7i3G","tlshash":"fca302e1d75da14ae278433ce2f1a1da5f32e0352b99634373958c2ffa34a459fa0358","first_seen":"2025-11-27T17:09:49.620604Z","last_seen":"2026-04-22T18:24:40.173299Z","times_seen":9,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/download.mp4","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/download.mp4 HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 694742\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:15:35 GMT\r\netag: \"690a0a87-a99d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 41\r\ncontent-range: bytes 0-694741/694742\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTloyaNsXu2cEFfnvg3daR7WMNXvGeOF43wYNVwdtDpbLu0s27lOZuuJK60z2IWHUieyqtLhy9z5P7XRDR2dyi8%2FjV%2B%2FZej%2BB8Ruc%2B6a9TEfVI1kOrqYaVSxAc8%2BKyc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85c9cb55694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202218,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"8a5fb6a24bba765522b7b5bde211cc50","sha1":"957c224ab72b64d506871c50e9686b9045a64e53","sha256":"0f6114355328155a7d17d566a29e638c17b591323fe241b2effe33526d602c88","sha512":"a5589ddfab7b2f996abf18003bd738f7efc160a8f8b0fb7e81dc397282004ff3d728ceb9aecf26204b4939650df8daf7257e028f4a9dd54b913fe58e7cc6f43d","ssdeep":"3072:9jzhR3V/4LruQPshmY/TzqMhMLuwF2KmjNlr4M8bR7LX56dAFj9pzjn:9wrLSP/PnyWxlkBLJ1FjLn","tlshash":"761412e790a20ddad3b80b7188e13115b22dd8d7b5fb8b5b348d0924efd55276f086c9","first_seen":"2026-04-22T18:23:33.996968Z","last_seen":"2026-04-22T18:23:33.996968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:11.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:11 GMT\r\nx-request-id: e1fc14c9d582cefe60deeda86f34b148\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: c9e1faaaef957bf5f62c68591266d389\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: muvPeMXT1aO1LluNR_38Q9Pje5i-VTFyIaG5pVFU0aInvmsYfKLoeA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c7fc088ee26545741c56a265138050f1","sha1":"432341deb9a6a958fb66b7116ffe1cc2c97ccc7a","sha256":"8c7ee74e23fa27a7d33b3c7c1f9670e6b2232948e4dec31fa748c367153bd78a","sha512":"f547a0661574d6412e3d91f70a1c644a223053103c2848e9c0ca37390336e53b2d333cd1c160e33b377af1aa8d8455d79f9d120236ecd429c4ef0414a2fa203c","ssdeep":"","tlshash":"f0b012001b9b093b2d8840482176151207e884d031fa094521cc407044dfcf1de09181","first_seen":"2026-04-22T18:23:33.997723Z","last_seen":"2026-04-22T18:23:33.997723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 204\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 4a210101022ff85438b1f2f122b3fc1f\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 1316cae39ebb7dd235b93a8d89eb1343\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ox9_3YgzL8_hPVKy3dwZapADefZ8mvYZV0p8F9dssZBslYynt9BABQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8a63fc176df64a109560ad081209afd8","sha1":"4a17c2ce02bbfb2d57a1062ba33b22793ab6fc9d","sha256":"114de601ec4ce6714a38a170a53301d245d40c84d9db130d7ea71cb78685e261","sha512":"b2582288fb183f854b5f245f18804f920e9ea125ecbf42eca5ac7e59022d3fd9c70c12c59a9115e72fc8e8786d2964d6b38ed6608550ccfab2c8041f26dc3769","ssdeep":"","tlshash":"7ad02284ba8411c288a102c8ac204ef0628c168110834d860aea9c918aa8271781d93b","first_seen":"2026-04-22T18:23:33.998477Z","last_seen":"2026-04-22T18:23:33.998477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /sjs/mods/rvmShowPoweredBy.min.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2026 21:25:17 GMT\r\netag: W/\"69c3013d-501\"\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:20:08-04:00\r\ncontent-encoding: br\r\nage: 178\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9f06a8648edd1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-04-22T18:26:19.966909Z","times_seen":629,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Upload/public/6908ae4acc918.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Upload/public/6908ae4acc918.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 13:29:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908ae4a-1276e\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Qmnsimbx4y78bH%2B4cww7U6KiiRYdPnoAWyZQCecq17KSv5Uwsk7c9vZOvR4KGgKeYdDw7z05wuDr94KbmfjAOm91p0iI8fiI78Hyzs2PlzuHUzFHpvIqiv1jPYxCbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f9965694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"940c91feba7ba1ebfa57dc3f39110e3f","sha1":"85e5a05c752a781f310b790194cf60fb51f86de6","sha256":"15ad6d37a3689d95c72dce231274ff7fa0c61e65fa2a5cdd6d9527a239bb2b89","sha512":"1bd2eb66246ad84af700f504c7c62777761582e5bc0433d595f21b65990cd3f12f6a05da2ffd7e6a0ee4b67abf3c96b331189d3f0bc7aa64a4758d8f183160ab","ssdeep":"1536:Vq6RBCsQ5i1eM80/gCFS5O+6yEha1EpY9mSaKpRWdkjDlJBGVLVOzb:sYB4Y80/PAlS81EpOxpoy5wVeb","tlshash":"7573f1ae93884b7272d25e05a9ab5b0eb454fbce172bd0d2870472a4317d0c5e37dc67","first_seen":"2025-11-27T17:09:49.573687Z","last_seen":"2026-04-22T18:24:40.198342Z","times_seen":11,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/5fc.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-a86\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLegUQe8u5QK4so9wxj19HuuiznjElQPWhOTbwJnph9SpyW6ETF40raynMXHC3pdv5OgWGGQaUsezhNxqJapLLG1climaEhwwcSW9KBsdcGcqajUGB9eV6oGeoXD2wU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09b55694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.854493Z","times_seen":18549,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/1.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/1.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a08c8-abfe\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvRUfsexBSGqhZeAKyL5N00vDReiFx1VTGAP%2Fi0YXhbR9jQwHsGngNL%2B7dhk0aUphsf8AbSblY%2BIZiNNnBE1bcqgK%2FKD19mwZZIoK2yCc0UeriHxSYNefC865NXw2Xo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a19d25694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 700, 8-bit colormap, non-interlaced","md5":"95ede75112674627c15fe91a6698f7cc","sha1":"b78fb58d44092422f2dd7c714bfd2bfe96bad384","sha256":"d9ebe65437c812e6461b09c204bc6df20fc1c9e7fe818f05dc9bffa32799fc30","sha512":"1ef985e6c23b666421dfe38b823b41e54bf73654b225b289d5da9378948bf237ddfa625b95fad4f600f555d78fee84f594ace91e51c563aa3220c086d450b109","ssdeep":"768:d4bQB2xDA3CaScbjgGzhsegjOya/E14QBhWdh45U5/+mXEwp56k:9BmAnK8hVyO//2Qd352mJp5R","tlshash":"591302b59bfef4aec32500b10ad7fd09126c59988ba658d126436dfd8dde3028e09774","first_seen":"2025-11-27T17:09:49.632126Z","last_seen":"2026-04-22T18:24:40.198928Z","times_seen":9,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home-p-discord.svg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-discord.svg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3c-cad\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJjD%2B3vwIjdACjmgywcVMitFOFA7k9D5MBS15OglkiQ8j9OR3m8bqQ5hI8OZ4XnlztoF2gLPH2nM2DNyYWRbOpqNnzgXXYJZKdmZntf1dDg3pUAT4U6gj5hZE7uEhKY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a29e65694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a97e2474ad542b2847737426f6fe2ae","sha1":"e29ce1da34e1f4e9f9fd231f2e1f4d2497499b9a","sha256":"b26887362894dffd827cd8089e5721fe104ca1d15484d9f5a4ff39d3a659d2c0","sha512":"0e2167a25b3fcb54511c6ff4557be92540b595b15ce56d868605eb340c74ca67933fe64c42822e1cad44a7ecc6d7dafa10705ba256a48370056c5d2c020e7af9","ssdeep":"","tlshash":"fc6100fbaae833f4814ae7d990359436737f38fb37069f485344afc0a94204099ae854","first_seen":"2025-11-27T17:09:49.64206Z","last_seen":"2026-04-22T18:24:40.195657Z","times_seen":17,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:12.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 219\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:12 GMT\r\nx-request-id: 486294afee1d974368b659b9cbd46935\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4d6357fafaba5d6e1c22b455c067307b\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: o6Vien64q-SNnHIgLTkk2hzHMRP21U_zMKXSUnSIYX2Rmt_hLm60Iw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5be92f06efb10ef869b3c0a5fcafe59a","sha1":"21b0032570a02e9b95da2517c7445d5d5993fc93","sha256":"f73fca5a81978f2c43de44a64f74bf1fbf800c80c448f9e722f0eab4e79f71cf","sha512":"6f31f63588f3e52593ba9737ee3a2228a1f0d703006515deac1e775381ae7dd18899842c69c8751f555bca0f799488939d9016dcfdea03c68a1bf3a42d19b952","ssdeep":"","tlshash":"a8d02396bf1405405c6072c4e7152d20d55806c7046f415647fd0cb215c4179f40fc7b","first_seen":"2026-04-22T18:23:34.001835Z","last_seen":"2026-04-22T18:23:34.001835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home_banner_2.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_2.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 13:52:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0509-4076b\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YOl%2BjKZPwamdwmW3bHNnOX8I7qPcD%2B5aPnVgni4hWXg5kDC8Ig%2BRcV7st%2F3GQqT6jTbqF3%2BDYBt%2F0XL05pYpP0M0Is2%2BZ8E9G9dE3zNotSEg3ZsYIU1jzz3CgDAxoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f9a05694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"4edb32e15e62992c49a5d6081755960b","sha1":"d4d60aeae3ea3d47edd258dd75ab38bb2d7f8021","sha256":"384782e0c0551eabee3a5e455f445828b45e21d0b10c32601f7e597390097a1b","sha512":"aebe30f1ca659ac9141ffee439acd91dcba5a3265fe87d172943029affa5b271c1ce1fa2183c63a4bb743c8ad8ac7bb7e300f591b64ce80c8093b48a04899322","ssdeep":"6144:wtreYObd6SGtlgok2sCHNG/f2qGNWBVnJ6cud:2rjOwSGte34HN+TGEBVnJ6Z","tlshash":"be44022b4eb662e3e943caada41b0d13fe3f52406380b92fcb3579dc9607164dd4a64d","first_seen":"2025-11-27T17:09:49.562993Z","last_seen":"2026-04-22T18:24:40.218766Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/BTC_Price.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/BTC_Price.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:16:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0ab2-57dae\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=778KzgDxS1nTOv7tGAffDxrPS58OYtHcjYZjLuMHx1q4IYIQnLFx0YgxmYWiAqnN1FKYBjTsfqeZIm4KmlpNuhacnDEITDZjgevBnCxXaWTbnhYCRIQH3Y1hwFpBIOU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a19d55694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 849 x 594, 8-bit/color RGBA, non-interlaced","md5":"013b219ede3c5a55ce26a42eae553377","sha1":"c4881a5304909fe48cced573c682409ee18ae482","sha256":"d825ea3de8fe0d361b5fe04a28d9b790885d32ca1d0c6b5e98d9ca0e2915632a","sha512":"1babd4e75add157dc0b173bf95d8f91272b2e0a8a001166746a1d74d517beb95b775437ef32751a110b01d4cced5adeab8f255727569cdd9e98d239505b3652a","ssdeep":"6144:pHbM/dFaf83dg9cvpEE6T+hRq7uaFsSZ7xsAHpJ4mA0B1qrv3xluq2jwA+:daFCUqipE+hRq6amSRKAL4m2TBln","tlshash":"be7423fc2d482578bbdfe4012c5856bc0e5e534e4612a2cd0a82e0954cfcf5a66ef2f9","first_seen":"2025-11-27T17:09:49.58732Z","last_seen":"2026-04-22T18:24:40.188639Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 18:23:05 GMT\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-04-22T23:50:21.151356Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":62,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:20.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:20 GMT\r\nx-request-id: 29dec0cd28aeee987ae4d202a5912c54\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 2f7b07fbffdda178bbcaab5f8b24c3b1\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: lDKlj7EOFi8aQywXX1mln7p96drKMlSulLFv_4E_3MFtgFetjAESVA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"77c329d9663bd1a0361163fa915c24a0","sha1":"8311d163267d83401aecfb950509edcf3104dda1","sha256":"ece0af007cc3c6a538c3472cead6e129491d6ec2a7d74e807a0e83fca9b38eb2","sha512":"a462742b8d9f6e72b23cc6841a02eb33a170ec3b7c21c9a6b2c751257d6f3cfb30037d5e266a8866c6b1ae6a658a9aa8db2070a64d4a42b338dc4019f82dd582","ssdeep":"","tlshash":"8cd023517f41166054d375c8ff155e64966713d311c64bc7d6fb281533d10a8b125867","first_seen":"2026-04-22T18:23:34.004187Z","last_seen":"2026-04-22T18:23:34.004187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T18:23:04.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRwao99Om4EVEe5yHi4F5YB6ue1vuJ1FvagN5TtV1brbukQx9S5ewyoy0gbu1A5lvFKboE%2FIpE4DhY0s32oEC8p9B7WtZgRRJVRyoFKS%2Bbw6mN5DFkq0mS8YX8ENa4g%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f06a854f93756c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115713,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (330)","md5":"9d476f118154c959da7592dad10abfa0","sha1":"54df18eda4c43299cd1c7a023b009fb0a44b22a3","sha256":"97d3ae2061fb782b664d852b557257e612bec5f38451aaaefa20a438ba031c34","sha512":"467c1e1d422460adf4e7bddc95673beed94a15dbf5dc0a6cd82f92a8790b956e23e7118ab9d0a92430085ca871a3407d3eabf35270d2365adb185054a08b290a","ssdeep":"1536:0KYL+cc44wlhVH+tQyW0C7vxmiXvX6hSfHnmNuSJ:wa4LlhoIxmKvX6hSfHnmNb","tlshash":"27b30a70e7fa19391023909b9beb52567ae5e437c20bca043ebd47604f96c2599337ec","first_seen":"2026-04-22T18:22:44.100892Z","last_seen":"2026-04-22T18:24:40.182557Z","times_seen":8,"resource_available":true,"data":null}},"time_used":679,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":637,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/xm/4558.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /xm/4558.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jun 2022 07:48:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"629719cc-48b0\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=da1x5aPZEjYewSoayhT96%2BzvEZpc1XAsKtHLcAeOBmv8sNfCt4QP2MC8VC9JCYdFGaM6pENVJK34Kq1wJqQbZE47Var5CMNsTgc8rAGQ8UjWbasK4ez79wq%2Bq4kuQNA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09c65694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 199, 16-bit/color RGBA, non-interlaced","md5":"c7e59bbd0ca773c704b906e229ca8383","sha1":"e191e030bfffacaa1b53ea83121a03955fd080ba","sha256":"22e62f07c3d37c4e0b8f717bda7ac0c60362fb80380c9f6def693dd4f9b4567c","sha512":"69dfd5a8bec0c1533adde28c322e96dcf9236b934a21668bc435f55f3284258881937ff92573a64188b4cd3ccd52f6d485eb4d864d4da0806753c71e385212db","ssdeep":"384:KR6xVqHk99Lm0m9/zkJMPoqgN09WuJFNFHaV2zbj69VmO:tvQk99K0m9/zQLqGeDJ9HHzbjnO","tlshash":"d682e0a4850add63e0b15bb72bad2753cd3d3a2020d4b2b53ebb09b468f090657a4ec4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.90921Z","times_seen":3356,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home-p-twitter.svg","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-twitter.svg HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TcR2Xcge5nkWj3IQ28H%2B9eSp5yOHMtLayk%2BeAwslEpVbLc8baeUakltJUArJNO49siTOUIKaMqYojv3fruKBboSzMxD0G3RPc%2B705HD0A0V6IF0Ptjw1G4BwyYgyyY%3D\"}]}\r\netag: W/\"690a1c3d-1c1\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a85a19db5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f55b9b1ba41f191f7d83f1410fb8a10","sha1":"9347c4d57e67d27d7b945926eb91dc2a6c69a5a1","sha256":"d3c653cb211a91f44bb8d772d67d996beeeda8315a484e982ae087ac8b20dedf","sha512":"17027af1a28466b84c30eb1b272906ee749de9db56db60f064604867cc941a6c702f3bb3585fd6489c874f94d2ebaed5d6609b6a854d702a3f70cc9137b077bb","ssdeep":"","tlshash":"10f0554193acf4c8c508de60230a3255b3fb32e379a4c3c0d2c89901a47c1af1e0e6e4","first_seen":"2025-11-27T17:09:49.565881Z","last_seen":"2026-04-22T18:24:40.20808Z","times_seen":17,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 209\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: 5e1c879160cd4ce09846784bc144c4eb\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: eb23d3b5a90fa192cdb71b16493557f1\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ZaeDHKqXEPTGUO5bz1y98QVnHcS7TQqFPusBInD2uFsEGy4AKUvE-Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"40e317afbb839d1f2079d8ab9340fc1d","sha1":"fdedc14a544b7fdef6c9d4811e56c15606466789","sha256":"8a506cea946bfb4844041127bb0b4a0901f554d13c80123e85101c917063a865","sha512":"352e726c8ce511947977519ffc5831744a84fc613731cf92a86c0f616d490246034aedce3a3da0c0e23e91ad3ed59b026c1ea69f42fcd819fb6579565103336f","ssdeep":"","tlshash":"0dd02209aea467825cd122c8ecb5b931b244b48e10d20d0297ed8c2122d00b9782aabb","first_seen":"2026-04-22T18:23:34.006407Z","last_seen":"2026-04-22T18:23:34.006407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:13.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:13 GMT\r\nx-request-id: 4876cd729e2c133a7e44a2017c690160\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 2b285b00af5fff5a1a20fba464b1a2fd\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NAKeEaaJIfowiiVNSspmAU_upkNx1q6r-2HtRgL3qT4OqPGog7ug6g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e47de1ff1f80eb04b5fc9426243fa6d7","sha1":"1b4a8a23605ff2d476dc9ccf71b9ba4fc3fab04f","sha256":"821f744267b4b9c9db70059fedb0d5cc1e1945304a4ab9aec5ac58dde0c081b8","sha512":"af14f7d225c075650c5ef6852fd2dc9021cd224add6058a02bfabcdb0256c86df2fec3ba1159e91a63628c717529370d054cfe4d75f183088429980274d94f3a","ssdeep":"","tlshash":"74d023c15fc01140455113d4dc583d24567e1c4e504f4b0342fd5d5305c4571f21943b","first_seen":"2026-04-22T18:23:34.007216Z","last_seen":"2026-04-22T18:23:34.007216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:21.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:21 GMT\r\nx-request-id: 68a3f0f64c5c42b447805e8bc9dd5676\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 9c40ddfcc259d9094c80f35a178a10b6\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: CGRJ-9aCv_KPOgvv3SJMLcbneex5usVPdir_8es7QCHz7218myTUXw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"45a2757db5b99412d81363b232f36c53","sha1":"5ac47f86e559cb016120fe276aa5b34e7ebb4989","sha256":"a012210e800d600deaf26100a83c0f9cfddc9c6a9a85761c3bfb6e421f3ba301","sha512":"fb2618642941874c4490bc622be0c1ba5ba5ff072784bc5da43722458c1340ff434921f738fb890579561cff871f0bb377f5b8381db31b4cf5d3c7b90824c4e5","ssdeep":"","tlshash":"99d02387bf5405c46c5071c4e5616d62d54c139a016f854b87fd49e566c117cb41fc76","first_seen":"2026-04-22T18:23:34.008078Z","last_seen":"2026-04-22T18:23:34.008078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/bootstrap5Slide/style.css","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BoK1rg9GzdOyAmvvfNyI6y0NWRrEhlOL0cgiZI5O%2B7lwSzUZT89%2BM5maVdJOBVa%2B8KGYIysE6DdOu8GqvUgiJA48YwI82nOqfeTRc5eKtVgHMj18Pkh4DkqZmguuPs%3D\"}]}\r\netag: W/\"6119d72c-24d\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a859f9945694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.026033Z","times_seen":6089,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 25 Sep 2021 13:34:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"614f2572-2c9e\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNYgUnbLdP3FpjNHX29s0Zl%2BkhaUnq7xOZD5JoMH5Kz%2B%2B3jIO2BYiRD3ifz6SQuYLBSEj5aMI9isQnqMfVpiLV4cwGjz%2FcCOd1PrscGQd%2FayIxLwShsDwgWIllTUqkc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a29f15694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-22T20:40:29.730152Z","times_seen":13308,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:06.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:06 GMT\r\nx-request-id: d07a83f5823c6798862b5e3c23416386\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 9c20e7c22768233cc821cadc482f755f\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 72nSCIYdtRslWZ2WbpVwNSV6dGlIRXCbDLdVToKFUQbRKDAQmmM5QA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90ac54b58a28789d21f913d5bed6d64c","sha1":"d515590023cab46a9b7d9c838d5a761321f889ed","sha256":"22bf5d895c30050aa0a0524f0bacaa0082950956cf9d8402ae391dbf52c56faa","sha512":"9fc69d8caf21a440d718e2d17ba3b2488cb3b36bcda952904d5d9b53317b0895a3f3ccc3838b8d7a5331131d88c047b8642e8fc34a21ebc01e94580c0a27b428","ssdeep":"","tlshash":"d5d023c19f801154496517c4dc983d34567e2c4f404b4a0342fe5d5345c4471f11943b","first_seen":"2026-04-22T18:23:34.00989Z","last_seen":"2026-04-22T18:23:34.00989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":748,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":716,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:20.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 215\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:20 GMT\r\nx-request-id: 1c68f1e20f36536c30709ea9cc73984d\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 7b30cfa9e0493711ffae19231788a343\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: qYjwTzov_ITXwVzbVhTM-_QQRMHhmwjjGMfcDJCZdBFMBD3mH68Xng==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":215,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a657e96f4c5bc95a62db383d0f063de5","sha1":"0568cbb7d7a4d4dd834f9836e0486787e8a456e5","sha256":"5b29862d8210a63f2f209b11a85f436aa90fa125f6d8b6cecc9676689b22ee77","sha512":"379b1d1916c9d776ae0abe0e15af799683ffdafa74996b22314895c2957bc0239a5e375c2fde6e99960fb546af3b264b6ba83fbcaa7686304bbbc36e2889b92b","ssdeep":"","tlshash":"45d022433b8412a0de6331c2fc122df2bd48254660c88b0747eeac20b98b0e5f82ac77","first_seen":"2026-04-22T18:23:34.010712Z","last_seen":"2026-04-22T18:23:34.010712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Static/js/coin.js","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Static/js/coin.js HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 23 Dec 2022 09:50:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a579c8-b3e6\"\r\nexpires: Thu, 23 Apr 2026 06:22:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BM2GWsL7HkmpOAgVBkMOHLYb3EYhvVNwF48%2BORIkH0IRKP1GgNEt3KJ%2F1uBsqV665BEGMCJlAZ2JoIzyBI7Ou%2B9vD2Yq4iG%2F7RI2jMllt2HETgqxjHTuZeKmtdk1hk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a859f9915694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46054,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (44565)","md5":"8185ca5042d7354128c043a61e475ca6","sha1":"35d4e81a3b0836fa59e8ae6110534870ae64fada","sha256":"58afa4b99b8bd0c2933d334837cf04f8e48681beee9ff4759b08e55558e30c99","sha512":"58fa2e9dbac39e2262030b593d16335a596af2659b50a4ab0bc1c19fb9c3023084e1c664518c9b4e3974cab617c3cbdfcb333ac8b754f201c6bd47316318038e","ssdeep":"768:OzuFp6a3zMbmhOETNkSYzAHX0NvIJQbohosvtjKTxUasQ2IRT9rknfsjSf/lLnc5:Ozw6H2l+eof/e4+Pt72","tlshash":"4c235d48b2e067185af70fa33e179cd5f7ba415d358445a39f8ca7e09632326f680b36","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:24:40.178868Z","times_seen":501,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:16.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:16 GMT\r\nx-request-id: 06c86a05a8bd030341c8136a0ee7ba38\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 97dbedc46f4f9a63e8e7febd6708601b\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: XaXCvEi6N-F2zrw-Z7EmO45DKjYOUE4NYSNRteU9zEUOCBN347DeoQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa874d6cef88c80306cb7389a5f79751","sha1":"2951420c3bb1e3a7ea47df09c025ca4c3f885a18","sha256":"95a29de84cf5f6dbca70b93092541ca7aeceed03f205f667304248cb20cc40ae","sha512":"a9657046c9cc7a192b063e64f6e6baee092204fb6b99be237b20292439be8fb98988e39c65a008c84c2d6cfb6fcfa299e8ebe27e9073f2956884a50b1d738c10","ssdeep":"","tlshash":"afd023a27f51155009d379c8fa161e10d669139303c607c5d6fb6c2177d1079f429437","first_seen":"2026-04-22T18:23:34.012045Z","last_seen":"2026-04-22T18:23:34.012045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:21.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx152.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 209\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:21 GMT\r\nx-request-id: 4fdc6a8adbe600267801d86b8bac3ce2\r\naccess-control-allow-origin: https://kcexx152.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: c06fe6690b73655555bf20a99166310f\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: tvPD-d9lfVf9R3QIVzO6SPUA-GQj26glBMKWiGDdmco6BDBY0vA5fQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":209,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f0e1b9f9b507334735d96e09fc842c3a","sha1":"fcb83ddec66c481023bcea92a82eb16db448683c","sha256":"6ed8954eaa64f6c4517875657c7699713a282dab120da2bef278df24142e43fa","sha512":"215919e631d2556392c6b3ad0d9f3b9f79f4ff76e5d8feb14b28c76650d642fe048d583f490d9bc1b84ca3fe017edb82d2ca80d38c350c80375186716151872a","ssdeep":"","tlshash":"5fd02205afa426815cc122c4ecb5b925b255b48d20d00e0383ed8c2126d20f8781aabb","first_seen":"2026-04-22T18:23:34.012953Z","last_seen":"2026-04-22T18:23:34.012953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx152.com/Public/Home/static/imgs/home_banner_1.png","fqdn":"kcexx152.com","domain":"kcexx152.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx152.com/","date":"2026-04-22T18:23:05.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx152.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:54:53 GMT","end":"Tue, 30 Jun 2026 10:54:52 GMT"},"fingerprint":{"sha1":"08:4D:6E:89:A8:F4:9A:4E:B6:16:B8:AC:F9:94:FE:CE:59:DF:8A:3F","sha256":"B1:07:0E:B2:22:6D:EC:37:C6:24:9C:85:34:8D:13:86:E4:5E:C9:61:85:A3:DA:CA:37:9E:11:61:1F:15:0B:DA"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_1.png HTTP/1.1\r\nHost: kcexx152.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx152.com/\r\nCookie: PHPSESSID=ffq9h4mhnd0m2655g36ud3cbm6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 13:52:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0503-33d82\"\r\nexpires: Fri, 22 May 2026 18:22:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 42\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fv42SzVjCDnN%2FbCDo8v0chd5BudJ6YFsk0NHq08kOohhEclhcaL1ETPXUnFJKtoIFhr7kjxjrvywv8xtL960OmjWIH5jpl4dTzMb8GBjve3vxFdu3NHWA1kfyFCFigE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a85a09aa5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1201 x 601, 8-bit/color RGBA, non-interlaced","md5":"7a706fe33fe6513a038e1cabe19641fa","sha1":"c50d4c295e430f5a05f8693b5a7658184af13018","sha256":"52e829d18b1a4ec0889ab4b1e5f3dc58b5df0c70f1e674f4dd8a6271b423a36b","sha512":"c4d402381b2b43e4fd4f3facedc2bf7f546202eddf7bec13b885b0a44ef75a138025629e9cd4ebb9e6266be911938a9afbbf0ec9b753a1a1737227d646039047","ssdeep":"6144:i0ZICYC8BmKsRhh9nUkUgkVJ8HB/9LZPIQMNiwi:i0ZICwJsRhh9nUkUgsJ8HB/jgFNij","tlshash":"3a24f190ae9e43b114bf3261f1440ee9e036314f956dfd6a6a34a7f9ff169302c21668","first_seen":"2025-11-27T17:09:49.602656Z","last_seen":"2026-04-22T18:24:40.210567Z","times_seen":8,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx152.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}