{"report_id":"a521d0a0-bbbd-4865-b7fb-76752134bc56","version":6,"status":"done","tags":[],"date":"2026-03-08T12:08:13Z","url":{"schema":"http","addr":"kelvin9.top","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kelvin9.top/","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"title":"kelvin9.top/","dom":{"size":12695,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10359)","md5":"97cae5c140f9242364661e801f7aee2c","sha1":"6f4c58c5de9742ecedd1d3d79ddfc4dd2c2dde06","sha256":"d1f1e78572f6a4753ceb54bd7bae84de9bbcf2442e5c96d732da17146cfc1284","sha512":"78aa2ae604a048a90b03fb1c7fa240ca38faed731eee51758aeaa68dae4562fe3062e9562df65fde9c10aa65edfe8fba8911a69f73684dfa991f6e117e7440f5","ssdeep":"192:gFbo9IO/vSgSYor+rrFKiaDCDQVDEUXMDfgEyfmDpB3bi17KqvgyT:8o9L/Z7FKFqmE1fLDeRKy","tlshash":"31429b3a74022413557385c4eac8ae14bcdabb7fc7245e9096a4022b5fcbdf27b5672c","dom_hash":"domhash1caa8eb3f1b3e2b148bacfdcf97bef59","first_seen":"2026-03-08T12:08:19.70481Z","last_seen":"2026-03-08T23:08:16.626618Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kelvin9.top","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-12T12:08:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kelvin9.top","ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":57,"request_count":19,"received_data":572049,"sent_data":8452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"FingerprintJS:3","description":"FingerprintJS is a browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them.","website":"https://fingerprintjs.com","common_platform_enumeration":"","icon":"FingerprintJS.svg","categories":["JavaScript libraries","Browser fingerprinting"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":1,"received_data":103028,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":1,"received_data":34885,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-03-04T18:52:40.619563Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kelvin9.top/","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fb9d2c62d0b53b369d827901c46d31c","sha1":"bb623e7486aa9ba44851ecc6ae01db5fe42d83a1","sha256":"b02ca87ad43e5ca61f953b2e414559e63f426c8513f7808707f39a4ba04ab219","sha512":"48cbe981398942910959f746a8225a91578752b67121817ae3b6b85859d0e97f9d89e96f1672b63d758f3148f3f37034017fd93d83415097616a90af285f0a18","ssdeep":"","tlshash":"afe061c3506e394c02108119304ac0075bb908b2de8549611c5837a58af9e4bc569455","size":363,"data":"","first_seen":"2025-03-05T00:30:25.174857Z","last_seen":"2026-05-31T15:28:13.961746Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/index-CBOMbKJh.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d9ee6d40d0e873791ae60380938d8a","sha1":"b83faa54f7f482264775a29ca3c0c11bf53232f2","sha256":"505ce707830a2869d0027eef89547035fe151a8b1026d80db261cf0386551c15","sha512":"d58ed12431eaac26d1be39b5c479513223598c01c39bca300bf132504c44749a53ade87208b97856bee9d3744ba4e7c1d3abe56df99c588f694639b692ed8b76","ssdeep":"12288:i8lX/qx7zvIczg7/v8dpnVPTUD9iwug1BiXaNO49fEWF1:i8lX/qx7zvIczg7HMpnVPAD9iwug1Bi4","tlshash":"0a844bd4b691b46903ba39e6403f1101f33e1d16b80e8494f66de9db3c2b99952b7f38","size":400597,"data":"","first_seen":"2026-03-08T12:08:19.718318Z","last_seen":"2026-03-08T23:08:16.632374Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","size":91,"data":"","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-08-14T08:41:00.943918Z","times_seen":1806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/page_footer.DnNjyp5x.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8e6ff15022e168f1d742df8217ad2b7e","sha1":"db1d4e52622a1bdf2e7758a24dba8751f9999fbb","sha256":"deb755638722e70e7179392d66cf599030ed48fee5d1231ac4694aa2e0594550","sha512":"715f2500deb1ef2ab485e40141fb740988d94a43f98ef46c075e62a0bcdbfbf70d99b237757c6162316c6728b156745d71102ed21e1af969a17aa880c15681f1","ssdeep":"","tlshash":"8341f1581c4b823b259ba1bed522a430b68a0ff0cb70cc92dcf949556ad9dfc3c06d2c","size":2290,"data":"","first_seen":"2026-03-08T12:08:19.710248Z","last_seen":"2026-03-08T23:08:16.637943Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/page_header.Bv5TbqHY.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a9834323dbebe0667eb69abf4e0e80c6","sha1":"0dc0d16c868f33f14176d98846ad161e9dfa2dfe","sha256":"fd2ad76ad3429a5067a28d741e52b8a2a903f548da9055bad1fa57fb548786e7","sha512":"6d1b972374e5ff483a752ee855cb5f72ca2efc1622a640fb264c0cc8dc6497e599dad10d1c8464e3067e7d890fbe9dca861080757a9bf87cd95b5146396bdfd5","ssdeep":"","tlshash":"f901c04d6c0bc176522254ded42258342114077e93249ce1c0fc8c396bd5eaca61bf69","size":756,"data":"","first_seen":"2026-03-08T12:08:19.714311Z","last_seen":"2026-03-08T23:08:16.627718Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9549491fa69813d582450290c39998b2","sha1":"e5994dcd04f3a660c8b11fc387ad191452c4bdf3","sha256":"2a3d691b2933dc59b8bca5b587316b9606b723e2c4b5ec9fc80ecddb5698b77b","sha512":"f953999686d22954c2aa187d0f35384bf02532e8bba254aca9c2e62cbf952549c1fa8f1ad647cd5091acf36f0a8075ff07367bb25a4b4867924da53af90883bd","ssdeep":"","tlshash":"c7a002ec01c8063dd13170b9ab2b3eb03f595c510343116f9699bb157146a17c70b4ec","size":76,"data":"","first_seen":"2025-09-27T19:31:00.108292Z","last_seen":"2026-03-08T23:08:16.643086Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@3/dist/fp.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"375436f436cc1022d7b4569a817c1a6b","sha1":"9359415cc419874654000870ca54523875c12c16","sha256":"99dc3803d1f19c8103f79f834044b2afd4c8af5b7927efbd36b1052d528b40ae","sha512":"077cb9e67a028f8ffc6c9f19793c15e20379840da1a927e711a0ac4dcf15fe6e1a15cee75436df340c707b9e77118f3cd38ede493e060c592069f39bc6001a92","ssdeep":"384:chQYSwHRBcifEJzXhGUa4LdsF7wRuCfLVg5+pCqNFaiE8E0QIQfJW7us6RfGDUPX:cSMHRU7Lic9NwlJW5iffPREA75","tlshash":"c5e207d8b2c3b029227378b6497f6007b63abd15242d4843d57be4c17ca5e5a813bfb9","size":33780,"data":"","first_seen":"2023-07-07T04:22:54Z","last_seen":"2026-08-14T05:26:10.967309Z","times_seen":8854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/uni-app.es.Cy0DQIXV.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"20b292faee77c2eb3fe2eab63eabc91d","sha1":"ea7f354554f59ce3401142a6d31af028b36305ae","sha256":"cc813daabde3b0b1231d3e671cb07b66599ca0ae2da9fa2d8418a42060c059e8","sha512":"9801989f77c21016f7a897ec5cdd754d007a1d2717d2b2f0dbcab60c71d1f84bb2b416a2c7be0df481a5ad33de14fee42df0921bea65f82bde50aa1c38434f54","ssdeep":"","tlshash":"56c0804f5d5531f57c1718d4353214a3916430ac16b84e51424d1578cad50ef516d50f","size":171,"data":"","first_seen":"2026-03-08T12:08:19.709263Z","last_seen":"2026-03-08T23:08:16.63488Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/pages-ap-login.D6Psz7mQ.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcb6fb98b4abe05dbbf3d7cf7b3fe734","sha1":"9ba4e1f501af88acd567fcacbc9b8d4908d33def","sha256":"ff187e1843c3da9b0a3e481991d9e4fb4ef90e0f2cf61374cd00a784aadf8280","sha512":"cb4b42e1f542aff5d05982776a2958e824d8be14b898144f46e68503a398238db6e6910bed1259937572ff109a979481f26623b0b535b38b1d9f094ec4d897b2","ssdeep":"192:FiD8PrRbn4titatCksPgPtNbk808Bzl8Q//BxR1750rnVVrZ3cW+zIWWESwvvWy8:FiDl0taF5dx8Q//v7QTr13BhZMfA","tlshash":"3452631db92ac3b4b33b06c861665404b01b1ffdd960bdd250f90b1c7ab6eac119a77e","size":13244,"data":"","first_seen":"2026-03-08T12:08:19.707839Z","last_seen":"2026-03-08T23:08:16.628539Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"kelvin9.top/assets/login-BAnlmY8C.css","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/login-BAnlmY8C.css HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 8507\r\nLast-Modified: Thu, 05 Mar 2026 10:01:25 GMT\r\nConnection: keep-alive\r\nETag: \"69a95475-213b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8507,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8506)","md5":"748e241d5f6c12e1224cb80de4b051ab","sha1":"f07759ed535895bc3261f4f963d65eb98ba490ad","sha256":"93904b83f37a1dec9b9d2439abbef9c8ec979aef336fce67ffd33a451f81082d","sha512":"46b2ddb967b2e488a4034a6749bb5ba6668955141fb67538e1b6b0f5c6a94729eea24f068a4f314d38f25d5064d1e4850533ebbb47c349826796eb4ad409b2b5","ssdeep":"96:fL37ce/J/A/3WTf4zXnLEP+Wi2fjXF7h9BXANVryApIj8CL6d30+6caf:fjwehI/WM/EGv2fjXF9q08CL690+6ca","tlshash":"4902327679042106d2f7c3916dd2bb890919f3b6d31225ddaa92261b8cc77cb3be138c","first_seen":"2026-03-08T12:08:19.706574Z","last_seen":"2026-03-08T23:08:16.633373Z","times_seen":3,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/pages-ap-login.D6Psz7mQ.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/pages-ap-login.D6Psz7mQ.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kelvin9.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13244\r\nLast-Modified: Thu, 05 Mar 2026 10:01:32 GMT\r\nConnection: keep-alive\r\nETag: \"69a9547c-33bc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13244,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13243)","md5":"fcb6fb98b4abe05dbbf3d7cf7b3fe734","sha1":"9ba4e1f501af88acd567fcacbc9b8d4908d33def","sha256":"ff187e1843c3da9b0a3e481991d9e4fb4ef90e0f2cf61374cd00a784aadf8280","sha512":"cb4b42e1f542aff5d05982776a2958e824d8be14b898144f46e68503a398238db6e6910bed1259937572ff109a979481f26623b0b535b38b1d9f094ec4d897b2","ssdeep":"192:FiD8PrRbn4titatCksPgPtNbk808Bzl8Q//BxR1750rnVVrZ3cW+zIWWESwvvWy8:FiDl0taF5dx8Q//v7QTr13BhZMfA","tlshash":"3452631db92ac3b4b33b06c861665404b01b1ffdd960bdd250f90b1c7ab6eac119a77e","first_seen":"2026-03-08T12:08:19.707839Z","last_seen":"2026-03-08T23:08:16.628539Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1007,"timings":{"blocked":339,"dns":1,"connect":167,"send":0,"wait":325,"receive":1,"ssl":171},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/uni-app.es.Cy0DQIXV.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/uni-app.es.Cy0DQIXV.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kelvin9.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 171\r\nLast-Modified: Thu, 05 Mar 2026 10:01:37 GMT\r\nConnection: keep-alive\r\nETag: \"69a95481-ab\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"20b292faee77c2eb3fe2eab63eabc91d","sha1":"ea7f354554f59ce3401142a6d31af028b36305ae","sha256":"cc813daabde3b0b1231d3e671cb07b66599ca0ae2da9fa2d8418a42060c059e8","sha512":"9801989f77c21016f7a897ec5cdd754d007a1d2717d2b2f0dbcab60c71d1f84bb2b416a2c7be0df481a5ad33de14fee42df0921bea65f82bde50aa1c38434f54","ssdeep":"","tlshash":"56c0804f5d5531f57c1718d4353214a3916430ac16b84e51424d1578cad50ef516d50f","first_seen":"2026-03-08T12:08:19.709263Z","last_seen":"2026-03-08T23:08:16.63488Z","times_seen":3,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":342,"dns":0,"connect":168,"send":0,"wait":166,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/pages-ap-login.D6Psz7mQ.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/pages-ap-login.D6Psz7mQ.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/assets/index-CBOMbKJh.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13244\r\nLast-Modified: Thu, 05 Mar 2026 10:01:32 GMT\r\nConnection: keep-alive\r\nETag: \"69a9547c-33bc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13244,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13243)","md5":"fcb6fb98b4abe05dbbf3d7cf7b3fe734","sha1":"9ba4e1f501af88acd567fcacbc9b8d4908d33def","sha256":"ff187e1843c3da9b0a3e481991d9e4fb4ef90e0f2cf61374cd00a784aadf8280","sha512":"cb4b42e1f542aff5d05982776a2958e824d8be14b898144f46e68503a398238db6e6910bed1259937572ff109a979481f26623b0b535b38b1d9f094ec4d897b2","ssdeep":"192:FiD8PrRbn4titatCksPgPtNbk808Bzl8Q//BxR1750rnVVrZ3cW+zIWWESwvvWy8:FiDl0taF5dx8Q//v7QTr13BhZMfA","tlshash":"3452631db92ac3b4b33b06c861665404b01b1ffdd960bdd250f90b1c7ab6eac119a77e","first_seen":"2026-03-08T12:08:19.707839Z","last_seen":"2026-03-08T23:08:16.628539Z","times_seen":3,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/page_footer.DnNjyp5x.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/page_footer.DnNjyp5x.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/assets/pages-ap-login.D6Psz7mQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2290\r\nLast-Modified: Thu, 05 Mar 2026 10:01:27 GMT\r\nConnection: keep-alive\r\nETag: \"69a95477-8f2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2290,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2289)","md5":"8e6ff15022e168f1d742df8217ad2b7e","sha1":"db1d4e52622a1bdf2e7758a24dba8751f9999fbb","sha256":"deb755638722e70e7179392d66cf599030ed48fee5d1231ac4694aa2e0594550","sha512":"715f2500deb1ef2ab485e40141fb740988d94a43f98ef46c075e62a0bcdbfbf70d99b237757c6162316c6728b156745d71102ed21e1af969a17aa880c15681f1","ssdeep":"","tlshash":"8341f1581c4b823b259ba1bed522a430b68a0ff0cb70cc92dcf949556ad9dfc3c06d2c","first_seen":"2026-03-08T12:08:19.710248Z","last_seen":"2026-03-08T23:08:16.637943Z","times_seen":3,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/pDxWAF1pBB0dzGB-D7NyJrii.woff2","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/pDxWAF1pBB0dzGB-D7NyJrii.woff2 HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/assets/index-BJ6U4fM6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:55 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 16616\r\nLast-Modified: Thu, 05 Mar 2026 10:01:35 GMT\r\nConnection: keep-alive\r\nETag: \"69a9547f-40e8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16616,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16616, version 1.655","md5":"4afcd3b79b78d33386f497877a29c518","sha1":"cc7ebaa05a2cd3b02c0929ac0475a44ab30b7efa","sha256":"cded49f94fc16dc0a14923975e159fbf4b14844593e612c1342c9e34e2f96821","sha512":"2dc9fff1d57d5529c9c7bff26fa9f3f94adc47e9cef51d782e55ecf93045200140706ab5816dfd4a0b49b8db2263320fa2f0fa31a04e12d0c91fea79b127255d","ssdeep":"384:0qJzQ61qLjMj2JfDC3uq2B/YgduJyovfw4TQRJGL7VGhX8aJl/hObP:x8LHMjGbCeqEFuBwkqJGLhGhVLsP","tlshash":"a772d03d74972759eac2ce7f720d228627d6f9888e615fe83817d00c657604e6a603ec","first_seen":"2023-04-05T14:54:42Z","last_seen":"2026-08-14T07:44:35.74456Z","times_seen":26068,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:53.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 12:07:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 9d91b8dd0c01b28a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 759120\r\nexpires: Fri, 26 Feb 2027 12:07:53 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hQJZgqT9syQOJcN3aB9Ww5X49IXHxS1wfL49LVGXpHv6Ky2HTgldcZi8EkqlmfjeZkk7PrMWDDm94%2BKtwE%2BcmHypCZHb%2FCVus8s8SQsV7G8Gv8hbqYI0uPM12qW9ot3OMRVUttQZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-14T11:53:12.175171Z","times_seen":59823,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":34,"dns":1,"connect":6,"send":0,"wait":15,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/page_header-YaoRbAbg.css","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/page_header-YaoRbAbg.css HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 1241\r\nLast-Modified: Thu, 05 Mar 2026 10:01:28 GMT\r\nConnection: keep-alive\r\nETag: \"69a95478-4d9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1241,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1240)","md5":"7e9942abf7d29cbfd53cd065ace5b627","sha1":"ff88ab8224ce4ff26ea11c4c809b6ee74d7c18a3","sha256":"8b22cc9d8f56f535ca0bbbdb8364a1ab678a93b228a764447b3070bbaf7f47d7","sha512":"4c0a0997123042df4a7ac22b21d8ce318f33457fb20522545e915eeca9fba950692ffbe679c40033b815b4758805c2d308cb4b84421bc12875756d1f10967e70","ssdeep":"","tlshash":"68219a5d63cd2ca8b663c239d5ef43881030773bc7a286f948cbe6198d479252e5adc8","first_seen":"2026-03-08T12:08:19.712216Z","last_seen":"2026-03-08T23:08:16.641378Z","times_seen":3,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/page_footer-oZjgpm9f.css","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/page_footer-oZjgpm9f.css HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 3851\r\nLast-Modified: Thu, 05 Mar 2026 10:01:27 GMT\r\nConnection: keep-alive\r\nETag: \"69a95477-f0b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3850)","md5":"dd4642dd9ebc87a18d703dc26d464b4a","sha1":"024e758f509f4e7e0fd5486504436b6da9b223e1","sha256":"e3d9bd2231c7162130354b1c9c277949c07661b50fe28b25d57ecadff0e38de0","sha512":"8d7f14b7c2b3d6e97529bb512c9006bf67cd298e96f4cdfcabe8246c4b52394161820fce5eaa1ea42d08c2b297879654a75cbf1543e5fad681980e3decab74f9","ssdeep":"","tlshash":"cd810111dbc98853b667de38f66673887b3207236633846fac13e229e88b0451767d6d","first_seen":"2026-03-08T12:08:19.712998Z","last_seen":"2026-03-08T23:08:16.637029Z","times_seen":3,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.BCo6x5W8.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kelvin9.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 91\r\nLast-Modified: Thu, 05 Mar 2026 10:00:51 GMT\r\nConnection: keep-alive\r\nETag: \"69a95453-5b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-08-14T08:41:00.943918Z","times_seen":1806,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":342,"dns":0,"connect":168,"send":0,"wait":168,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/page_header.Bv5TbqHY.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/page_header.Bv5TbqHY.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kelvin9.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 756\r\nLast-Modified: Thu, 05 Mar 2026 10:01:28 GMT\r\nConnection: keep-alive\r\nETag: \"69a95478-2f4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (755)","md5":"a9834323dbebe0667eb69abf4e0e80c6","sha1":"0dc0d16c868f33f14176d98846ad161e9dfa2dfe","sha256":"fd2ad76ad3429a5067a28d741e52b8a2a903f548da9055bad1fa57fb548786e7","sha512":"6d1b972374e5ff483a752ee855cb5f72ca2efc1622a640fb264c0cc8dc6497e599dad10d1c8464e3067e7d890fbe9dca861080757a9bf87cd95b5146396bdfd5","ssdeep":"","tlshash":"f901c04d6c0bc176522254ded42258342114077e93249ce1c0fc8c396bd5eaca61bf69","first_seen":"2026-03-08T12:08:19.714311Z","last_seen":"2026-03-08T23:08:16.627718Z","times_seen":3,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":342,"dns":1,"connect":168,"send":0,"wait":165,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/uni-app.es.Cy0DQIXV.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/uni-app.es.Cy0DQIXV.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/assets/pages-ap-login.D6Psz7mQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 171\r\nLast-Modified: Thu, 05 Mar 2026 10:01:37 GMT\r\nConnection: keep-alive\r\nETag: \"69a95481-ab\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"20b292faee77c2eb3fe2eab63eabc91d","sha1":"ea7f354554f59ce3401142a6d31af028b36305ae","sha256":"cc813daabde3b0b1231d3e671cb07b66599ca0ae2da9fa2d8418a42060c059e8","sha512":"9801989f77c21016f7a897ec5cdd754d007a1d2717d2b2f0dbcab60c71d1f84bb2b416a2c7be0df481a5ad33de14fee42df0921bea65f82bde50aa1c38434f54","ssdeep":"","tlshash":"56c0804f5d5531f57c1718d4353214a3916430ac16b84e51424d1578cad50ef516d50f","first_seen":"2026-03-08T12:08:19.709263Z","last_seen":"2026-03-08T23:08:16.63488Z","times_seen":3,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/uni.cb5fb309.css","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:53.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/uni.cb5fb309.css HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:53 GMT\r\nContent-Type: text/css\r\nContent-Length: 8989\r\nLast-Modified: Thu, 05 Mar 2026 10:01:38 GMT\r\nConnection: keep-alive\r\nETag: \"69a95482-231d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8989,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8988)","md5":"bdeccd0ec3cd386e6159326361db8be7","sha1":"70931ddf88c5bdd20c0a911e50b9ec1f9c7dc42d","sha256":"cb5fb309851d767f1f221cd06a7e2c274a6567160d80d0908b98e057a709c0c1","sha512":"b897e7fc5309c888392a058e9a6201b9d47240af40bbc2be5bec81066384384bc13761884015913c9bd236c1888443605944d0c63cdd8c93836d443d208d1ef5","ssdeep":"192:Ujj8LGJ0CQLnWL9MNXVA87eizyHEDyPhd:UXpmLWLL87ei+ywd","tlshash":"17027571d900123eb51bcf2d52e1e74f322285b3d9133b19ab3535744f9eac62a36789","first_seen":"2025-09-27T19:31:00.036679Z","last_seen":"2026-05-31T15:28:13.956851Z","times_seen":176,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@3/dist/fp.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:53.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@fingerprintjs/fingerprintjs@3/dist/fp.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 12:07:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14485\r\ncf-ray: 9d91b8dcfaec35a6-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.4.2\r\nx-jsd-version-type: version\r\netag: W/\"83f4-k1lBXMQZh0ZUAAhwylRSOHXBLBY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230126-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 30447\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JPtgJ57qtChZIOSMa%2B%2BoRnxcxKp3LzsfhYEWLBL4fb4%2FEf4KpuGbQZxdWMuJ5ypI5iQu6hVTMYTCYS81n5OACFtfE%2BTIwiohQ8GX9FDGJkGveNPTLmDA6y6YAFdfcBgtYq8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33780,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33446)","md5":"375436f436cc1022d7b4569a817c1a6b","sha1":"9359415cc419874654000870ca54523875c12c16","sha256":"99dc3803d1f19c8103f79f834044b2afd4c8af5b7927efbd36b1052d528b40ae","sha512":"077cb9e67a028f8ffc6c9f19793c15e20379840da1a927e711a0ac4dcf15fe6e1a15cee75436df340c707b9e77118f3cd38ede493e060c592069f39bc6001a92","ssdeep":"384:chQYSwHRBcifEJzXhGUa4LdsF7wRuCfLVg5+pCqNFaiE8E0QIQfJW7us6RfGDUPX:cSMHRU7Lic9NwlJW5iffPREA75","tlshash":"c5e207d8b2c3b029227378b6497f6007b63abd15242d4843d57be4c17ca5e5a813bfb9","first_seen":"2023-07-07T04:22:54Z","last_seen":"2026-08-14T05:26:10.967309Z","times_seen":8854,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":30,"dns":2,"connect":1,"send":0,"wait":37,"receive":6,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:53.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 08 Mar 2026 12:07:53 GMT\r\ndate: Sun, 08 Mar 2026 12:07:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f04de8ad1ef740d940ec0f534a8f6474","sha1":"3b31756e84c8887867417c7d6cc64501c9d9193c","sha256":"2f1ac0c31bc3ede8317cf72e9d28051ec727c9a0014aa69cff495abd6256bb4e","sha512":"69afede137c125294044274e463f30c02594f379ec879285e0b3ee41097f503dfb8272487759870f547e4dc4cf8828a2c1efaa806deb2f3124b7f6d67c638783","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:8KYXuM0p2+4","tlshash":"28427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:44:19.218006Z","last_seen":"2026-08-14T11:11:20.730946Z","times_seen":28793,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":117,"dns":6,"connect":15,"send":0,"wait":19,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.BCo6x5W8.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/assets/pages-ap-login.D6Psz7mQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 91\r\nLast-Modified: Thu, 05 Mar 2026 10:00:51 GMT\r\nConnection: keep-alive\r\nETag: \"69a95453-5b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-08-14T08:41:00.943918Z","times_seen":1806,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/static/favicon.ico","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /static/favicon.ico HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 17542\r\nLast-Modified: Thu, 05 Mar 2026 09:59:24 GMT\r\nConnection: keep-alive\r\nETag: \"69a953fc-4486\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17542,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ca6619b86c2f6e6068b69ba3aaddb7e4","sha1":"c44a1bb9d14385334eb851fbb0afb19d961c1ee7","sha256":"17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09","sha512":"30f8f8618bfbcd57925411e6860a10b6ad9a60f2a6b08d35c870ea3f4cec4692596a937ff1457ceff5847d5da2b86ceba0200706625e28c56a2455e6a8c121d3","ssdeep":"192:9dLhJ6/f2dh+xQLeZ10TLwhwOHae6nmErcglsIZS3F:3jaOdhQQu0TLwaOHEr6IZ","tlshash":"ae72f191ad68c084c37ef432dd69deab66467de2b6c26c071fb53f86f23821e7901106","first_seen":"2023-04-17T01:45:41Z","last_seen":"2026-08-13T08:30:43.224871Z","times_seen":19461,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T12:07:52.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:52 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 05 Mar 2026 09:59:11 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a953ef-50c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"FingerprintJS:3","description":"FingerprintJS is a browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them.","website":"https://fingerprintjs.com","common_platform_enumeration":"","icon":"FingerprintJS.svg","categories":["JavaScript libraries","Browser fingerprinting"]}],"data":{"size":1292,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8811b39bcf0d68592067d12b396c70ca","sha1":"68f3e18681c665573c418b986824e0a7f5c4e3b4","sha256":"0cbe3701b1289b666d77b1f7e455c624b136d4552978a0463f8d1977331759b9","sha512":"b930cefabe94f61b13a399a9ad76415ec8612c6894f7358b6f54090f0c5609240037d1e9467f1851663e585297a5396017b5c9795f323f708518df1245018285","ssdeep":"","tlshash":"16215a4918485f4e131453887055f56fbcfb0d366d81d9b314b7917ae8a978fc91c85c","first_seen":"2026-03-08T12:08:19.717567Z","last_seen":"2026-03-08T23:08:16.630206Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":442,"dns":101,"connect":167,"send":0,"wait":166,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/index-CBOMbKJh.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:53.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/index-CBOMbKJh.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 400597\r\nLast-Modified: Thu, 05 Mar 2026 10:01:16 GMT\r\nConnection: keep-alive\r\nETag: \"69a9546c-61cd5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":400597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62740)","md5":"49d9ee6d40d0e873791ae60380938d8a","sha1":"b83faa54f7f482264775a29ca3c0c11bf53232f2","sha256":"505ce707830a2869d0027eef89547035fe151a8b1026d80db261cf0386551c15","sha512":"d58ed12431eaac26d1be39b5c479513223598c01c39bca300bf132504c44749a53ade87208b97856bee9d3744ba4e7c1d3abe56df99c588f694639b692ed8b76","ssdeep":"12288:i8lX/qx7zvIczg7/v8dpnVPTUD9iwug1BiXaNO49fEWF1:i8lX/qx7zvIczg7HMpnVPAD9iwug1Bi4","tlshash":"0a844bd4b691b46903ba39e6403f1101f33e1d16b80e8494f66de9db3c2b99952b7f38","first_seen":"2026-03-08T12:08:19.718318Z","last_seen":"2026-03-08T23:08:16.632374Z","times_seen":3,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":167,"receive":673,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/index-BJ6U4fM6.css","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:53.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/index-BJ6U4fM6.css HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:53 GMT\r\nContent-Type: text/css\r\nContent-Length: 75612\r\nLast-Modified: Thu, 05 Mar 2026 10:01:16 GMT\r\nConnection: keep-alive\r\nETag: \"69a9546c-1275c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75612,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dda96fe3e14699edd8325f13a09c3a07","sha1":"2c11932bbb9a18a972ae61498c6f1a96019c609e","sha256":"f49eb271e44229e6afa121e071ed19d51be17d214a1e9e86f349fdae01952c3b","sha512":"1300bda65975991388814103c406723a7a8e501c298cf3660005393a7a9935c235608683a15e4621a45ba7f43a306e7bc9d12bb5acd806ce533f6e370f53f70c","ssdeep":"1536:80KR1AKeEfqe2T7XnC171+aWn9he/4Sycpo:HT7XC15bWze/hY","tlshash":"2373fa340036a458e5f3dc1330cd3d523c4da027aa8a9527e62f8aac5ee787787a5f75","first_seen":"2025-09-27T19:31:00.071648Z","last_seen":"2026-03-08T23:08:16.631002Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1185,"timings":{"blocked":341,"dns":6,"connect":165,"send":0,"wait":330,"receive":169,"ssl":171},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/page_footer.DnNjyp5x.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/page_footer.DnNjyp5x.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kelvin9.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2290\r\nLast-Modified: Thu, 05 Mar 2026 10:01:27 GMT\r\nConnection: keep-alive\r\nETag: \"69a95477-8f2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2290,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2289)","md5":"8e6ff15022e168f1d742df8217ad2b7e","sha1":"db1d4e52622a1bdf2e7758a24dba8751f9999fbb","sha256":"deb755638722e70e7179392d66cf599030ed48fee5d1231ac4694aa2e0594550","sha512":"715f2500deb1ef2ab485e40141fb740988d94a43f98ef46c075e62a0bcdbfbf70d99b237757c6162316c6728b156745d71102ed21e1af969a17aa880c15681f1","ssdeep":"","tlshash":"8341f1581c4b823b259ba1bed522a430b68a0ff0cb70cc92dcf949556ad9dfc3c06d2c","first_seen":"2026-03-08T12:08:19.710248Z","last_seen":"2026-03-08T23:08:16.637943Z","times_seen":3,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":326,"dns":0,"connect":163,"send":0,"wait":163,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kelvin9.top/assets/page_header.Bv5TbqHY.js","fqdn":"kelvin9.top","domain":"kelvin9.top","tld":"top"},"ip":{"addr":"47.251.20.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:54.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelvin9.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 14:16:45 GMT","end":"Tue, 26 May 2026 14:16:44 GMT"},"fingerprint":{"sha1":"BA:A0:10:2E:31:3C:84:E5:54:46:53:F2:81:88:E9:65:11:70:4A:6A","sha256":"62:10:6E:86:2D:B4:0C:B1:B2:BC:71:B1:68:00:E5:6A:43:37:CE:25:5F:8A:7E:8A:BD:18:A1:B9:10:4B:8D:3A"}}},"request":{"raw":"GET /assets/page_header.Bv5TbqHY.js HTTP/1.1\r\nHost: kelvin9.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/assets/pages-ap-login.D6Psz7mQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 08 Mar 2026 12:07:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 756\r\nLast-Modified: Thu, 05 Mar 2026 10:01:28 GMT\r\nConnection: keep-alive\r\nETag: \"69a95478-2f4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (755)","md5":"a9834323dbebe0667eb69abf4e0e80c6","sha1":"0dc0d16c868f33f14176d98846ad161e9dfa2dfe","sha256":"fd2ad76ad3429a5067a28d741e52b8a2a903f548da9055bad1fa57fb548786e7","sha512":"6d1b972374e5ff483a752ee855cb5f72ca2efc1622a640fb264c0cc8dc6497e599dad10d1c8464e3067e7d890fbe9dca861080757a9bf87cd95b5146396bdfd5","ssdeep":"","tlshash":"f901c04d6c0bc176522254ded42258342114077e93249ce1c0fc8c396bd5eaca61bf69","first_seen":"2026-03-08T12:08:19.714311Z","last_seen":"2026-03-08T23:08:16.627718Z","times_seen":3,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"kelvin9.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"kelvin9.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kelvin9.top/","date":"2026-03-08T12:07:56.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kelvin9.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 12:07:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 08 Mar 2026 15:07:58 GMT\r\ncache-control: max-age=10800\r\nset-cookie: __uni__uid=rBEQiWmtZp4D71FeAx43Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-14T11:22:58.370449Z","times_seen":20227,"resource_available":false,"data":null}},"time_used":2550,"timings":{"blocked":557,"dns":1,"connect":244,"send":0,"wait":1435,"receive":0,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}