{"report_id":"ae0af757-c0eb-400d-aba0-244cdc55a766","version":6,"status":"done","tags":[],"date":"2026-02-25T18:34:59Z","url":{"schema":"http","addr":"lmefxc.com","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"172.67.180.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"title":"LME","dom":{"size":48340,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40615)","md5":"25e75236cd02340394ac1fbe07a463bc","sha1":"4b8dcb5ca64f163418371618e5956ac86b918af7","sha256":"afc57541f09bf41fdb09fb22dd367eaf63fb1d9e1662f92fce60b3361117e3e9","sha512":"f930ef481a1f37de8b475a1686f406e99159ce1d489aba78de62485fe676170963e89b1a6a729df4adf90bf3fa1fc9474a392888b898e489c58b3ba19186f75e","ssdeep":"384:FyU0peNgZCxN2MSlsVpMfsEzbsM4F8iThCjJXMfsEzbsM4TOIHkKJVPIBE3B:FyU0pWgQxN2TziTs77LPIBE3B","tlshash":"9d23eb32f00d95ab42b7d9cbd132bf2920c2f70bd65a85003eac46a55fe7cf9b995160","dom_hash":"domhash6dcec966c3572b38106896062a31bab0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lmefxc.com","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"172.67.180.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T18:34:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:40Z","timestamp":1772044480,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45962,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:40.830735+0000\",\"flow_id\":1790379678519654,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45962,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.282982+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:40Z","timestamp":1772044480,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45940,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:40.865020+0000\",\"flow_id\":1830550507633931,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45940,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.277771+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:40Z","timestamp":1772044480,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45954,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:40.876553+0000\",\"flow_id\":422185634120157,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45954,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-02-25T18:34:40.279005+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:40Z","timestamp":1772044480,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45978,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:40.882533+0000\",\"flow_id\":836561931362228,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45978,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.286644+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:41Z","timestamp":1772044481,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45986,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:41.031997+0000\",\"flow_id\":472056646907120,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45986,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.439536+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:41Z","timestamp":1772044481,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45980,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:41.039498+0000\",\"flow_id\":121952387770943,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45980,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.436799+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:41Z","timestamp":1772044481,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":45996,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:41.074049+0000\",\"flow_id\":792547106493169,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45996,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.529137+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:41Z","timestamp":1772044481,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":46008,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:41.089184+0000\",\"flow_id\":987160664619887,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":46008,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.539503+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:41Z","timestamp":1772044481,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":46018,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:41.094821+0000\",\"flow_id\":1589523385433281,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":46018,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.539841+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:41Z","timestamp":1772044481,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":46026,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:41.137173+0000\",\"flow_id\":1577031473053018,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":46026,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.539994+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:41Z","timestamp":1772044481,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":46034,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:41.229795+0000\",\"flow_id\":92061562863707,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":46034,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.688219+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:34:41Z","timestamp":1772044481,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":46048,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:34:41.297678+0000\",\"flow_id\":1914222913022128,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":46048,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:34:40.747696+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5-api.lmefxc.com","ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-25T18:00:45.613448Z","last_seen":"2026-02-25T18:00:45.613448Z","alert_count":142,"request_count":71,"received_data":345023,"sent_data":37039,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-10-12T15:33:58.168765Z","last_seen":"2026-02-24T15:48:10.384371Z","alert_count":0,"request_count":49,"received_data":157842,"sent_data":23769,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"lmefxc.com","ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-25T18:35:03.237159Z","last_seen":"2026-02-25T18:35:03.237159Z","alert_count":38,"request_count":19,"received_data":9041676,"sent_data":8066,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hw.rangwodf.cc","ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-12","domain_rank":0,"first_seen":"2025-06-03T12:45:54.191815Z","last_seen":"2026-02-19T15:44:14.989928Z","alert_count":0,"request_count":1,"received_data":5022,"sent_data":372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"54eea46cc87d90ed1c188058ba3767c7","sha1":"0842e94adbd347bb6c20afb03e3cc7a5f803e927","sha256":"6e320a51f54a3e36a1cc5da3d4cfec2dee3e78e1ce592b833ba7198ac7b643a3","sha512":"bea1a818fcb5ee178f43976b62df528beb41886c64bc026dcc9da0616cf91a9d4e57ac6beb34e3ac2f6c021870bd0eb0bcdfe0be8c1857b82f3fe897ab31bf87","ssdeep":"","tlshash":"9bc08cc9a0c2bd105a56e82458af35f4a02c443bb08c6b42cdf4dc5c2e720b08233fe8","size":158,"data":"","first_seen":"2026-02-25T17:49:39.176367Z","last_seen":"2026-02-25T18:35:56.371919Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"38d3cc150786a8971b43e66091ecc995","sha1":"29d8027856bba6a529d1af9384684143f767433c","sha256":"f1689a1ab60a1f9a5423b7bbc208f16c6bc60d4e4f263f8aaa3fae53affd9fc3","sha512":"00cd8544f61787ad191d2337a111551697261ced07a2c01651568f5b83fe0bfa3ae1b570d52cbb07bcc28e0fdb9d954126b3e8d27b1efa80d1e9c9c0e50def23","ssdeep":"","tlshash":"4dc08cc4a0c32e102612655015bf36e4d0244826b4885b43cc94dc883f230f49233ea8","size":150,"data":"","first_seen":"2025-05-23T04:04:23.025321Z","last_seen":"2026-05-04T13:28:29.536916Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/ac-chat.js?2.2.1770477070317","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-01T14:38:39.409214Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e04d9676e31c42caca5a103fe447d70a","sha1":"1a4f934ff08906bf6d6e1737dcc168f3f2e4d7e6","sha256":"9f24b718813d39ff22bd5ac7b1017dd296c34ac7fc4affce0030fdfa61a344fb","sha512":"a369d5d0cc28c5328fac8dc9fd9c60a6d37eabe89f4cd637b1c1c0b6920e138cd3694b1386eaf9ab8126cfd5524d87c2bc31d599c77b096095fe89333c22e1b4","ssdeep":"","tlshash":"e9c08cc4a0c26e102a16651115af28e490284427b0485b128ce4dc482e624b08233ea8","size":148,"data":"","first_seen":"2025-08-31T12:50:28.045473Z","last_seen":"2026-05-04T13:28:29.53342Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a3e06276018285c43d5ad008152e94dc","sha1":"61c580b97fdb7dd6e0dded5c57a2fcd5aa72b8c6","sha256":"d55611d472313e548e5209f8ca170cd8430e29c5e5df08e8a527293ef647f7cd","sha512":"206cf127920143d40f525027b18630d29caf10bd9d2a94bb20b936ccc9197c8cc382bfaba098b2fa65867482ca3673d973e6fba4370c7dd1016730ba8e6b25b0","ssdeep":"","tlshash":"7dc08cc4a0c37d011616a49020bf74e8a02a902a74481b16cda9e9893e220b5a233e98","size":156,"data":"","first_seen":"2026-02-25T17:49:39.175605Z","last_seen":"2026-02-25T18:35:56.369742Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2d98b00bcf2eb71792063651c8c77444","sha1":"448b70a28b1e864a5344bbb27b43319b560c0127","sha256":"d362dabc9ca1ad263bcb50b292a22a2fc2a6ed4ceb5c02c71e213d5a38a32a0b","sha512":"2278285f2d24cac768fa5d6be9610225ab512207a81364ec3037dba457cce25e14abd80a7cb1b3b00c0d431fee936d83be1f112151f3ccc7453a64939450a7b3","ssdeep":"","tlshash":"04c08cc4a0d73d001603642151ef34e4a028442670481b038da4d8483e220f08233ed8","size":144,"data":"","first_seen":"2023-10-27T05:38:28Z","last_seen":"2026-06-06T07:45:56.760371Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c95ca2328f4725ac14546efd8ad7ed7c","sha1":"f931cde2613f194066603e4c67eb196dd37392d9","sha256":"f974f53506576a891046e7585bcf5ccc45ea048fdde8534644ec195d94c9c042","sha512":"2a380c5b250032a63ffbc12978db232d5a132e6d3c755e7f8df54347bc8bdc4d7a27b2473e06d2c15a141aad72ce34ba405f6c6c570c3db7d3e1ccb58ac7a241","ssdeep":"","tlshash":"06c08cc6a0c22d105616681090bf25e4d028482eb0482b028c94d8492f630b0c233ed8","size":143,"data":"","first_seen":"2025-08-31T12:50:28.036299Z","last_seen":"2026-05-04T13:28:29.526971Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d00031216fa95f8ed09581b521828c52","sha1":"5fa5f294675e62220bd38c78a67ea92d3cf80867","sha256":"e57120b39d0a2bd1e7cca3aac99c4f3736a7cbd17b1f1a567f01a839a56b53fc","sha512":"c96fa9c95e77224142b3d57faa96df87a4be18b65afe538bd76df1b15dafa7ddfe4f4a1319be8a145aaa8e6c436463bc44d43603f023674c53d6c157eb0a9da9","ssdeep":"","tlshash":"09c08cc8a0c32d101602641010af25e49028802670481b028ca4d8493e220b08233edc","size":137,"data":"","first_seen":"2025-12-17T03:55:10.963435Z","last_seen":"2026-02-25T18:35:56.377612Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/vi-Dk3ZF86G.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72be46109a348ee9c7e5e2841ac0e4c8","sha1":"a6d327b9c398cf4c3ed1b461fd24efa198382067","sha256":"f8e5f68d9c1f998cb8e016a1f1cebd7d31010f460b9d3307b7df137de39369f7","sha512":"8cbbe3b05d1e7c9982796f59b00aed0d320fe278d15107a0a7ba7c83cf9c4b4a38517e30a7e3c37924c584072da66ee6f0bf9c422e19b3d053c3ec4d632ed533","ssdeep":"1536:R+H1PNHFNI3vikSIoCnLkod23x0y9K+MFuMg/KAuw8kIL2S2TSF1Dhoj/:QdHNI3vitIoCnF8h0yd0uMg/KY8kIyS2","tlshash":"823308451d64b40f446e563ff1dce84a2aef684ad3808e591be80afa87817733f13766","size":54594,"data":"","first_seen":"2026-02-25T17:49:39.088247Z","last_seen":"2026-02-25T18:35:56.264169Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/index-DH-MRcqw.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32a8543d9ad04ac0ac18213387124bef","sha1":"668a3e0131e7691435dcefa42db58d605ab39d70","sha256":"982a01f0ebd6e6e829f75adbb43e0a506deb422a35f7a1269e9d5af6d6e7c008","sha512":"caa82496b46de64127292abbbb87660a93d7b8179550144f99fa86d27cd23175f64cb730ce03f500479271164f99098f9fd85bb4d8262787e2c3dca8a82f443a","ssdeep":"6144:NCuWYrU6FYlCAHi6XiEjWYTkVcGmEym4mqn5nq4c:NCuWWtFYsCoVcGmEym4mqn5qB","tlshash":"6da4e681f85689bdebb75455544e2401328c3fcfd00888a6f6fe9d0a279adb8735eb34","size":466992,"data":"","first_seen":"2026-02-25T17:49:39.096677Z","last_seen":"2026-02-25T18:35:56.267486Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6a8542fb4cd04732629ec4a333ec2b5c","sha1":"fc083256dd4efdae8388685f50559d0a1e64ef4f","sha256":"bc8cb348dfb4c4e67bb0ee9db29a20bf56b941778fd1e545812b1aeefbe6e904","sha512":"efb5ff39d26a217a6fdee914b8a8f45096ab8eb2783dde1311a19a0057f430bdcbb463555c815d500d45c64a0f756b055bc5fc8461127c55c1d3baf31717ebb9","ssdeep":"","tlshash":"f1c08cc4a0c26e005a02651011bf24e49034442670485b038c94e94d2e320b0a233e98","size":143,"data":"","first_seen":"2023-12-02T09:04:32Z","last_seen":"2026-05-24T01:03:42.881756Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d1cdd02950a78a2d5f9aab21d6a508f","sha1":"f3ee9f1055b3dde2970903f2fce8d06b9bdd51b1","sha256":"721c0b357c1d6602c2807170bc0cd6f3d78b63aabbaf62d4cf664b591b355897","sha512":"63ff7ad2217e99e60c4d9739fbcef288600bdcf63ac04b9f9bc673dad000d836f25898710eb8cc78bcaa9e2e6e5afeb8b9592dd094f13196fb60a30a89f8a4a5","ssdeep":"","tlshash":"05c08cc8a0c23d101a02a41054af36e490248827704c2b428da4dc4c2e220f08233ee8","size":144,"data":"","first_seen":"2024-08-19T21:00:08.518977Z","last_seen":"2026-05-04T13:28:29.524465Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bc862f724d8913b17311dda854465197","sha1":"7cdfbe6344e4a9cf0e031fc6e931a6bded9b8835","sha256":"64657748ba72068bf1545bc854c76cd41e27716d84c3d2171b685785ffea345d","sha512":"0f4d5b9ae3fcc6b0e1ce197bdc06328794b27914adf598088f06301fc1a7ae6638b183a829f66cef7012c60d1ac0446d6b0fbedcb6d71c8b6f941639166033ae","ssdeep":"","tlshash":"f1c012da70ea39101519b81459af39f49124582774881b428dd9dc6c2d624f05623ff8","size":183,"data":"","first_seen":"2026-02-25T17:49:39.183148Z","last_seen":"2026-02-25T18:35:56.383114Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6c36dfb3c599d8ddd1404699adef24be","sha1":"f735b61fc6ed18474764082fc12d60a941d3c8a8","sha256":"ae106d4d5f9999df6278d9be58e723a51b71134feee0dc7a70137cfd5789d98d","sha512":"4996d8729df328f39f9e3456c8254fa655c87113d713472587e8d957f9861a333b9cb2ae2bf07932c6f188ac3244256d7c388ea2984ea6a27bc3d1038787ef08","ssdeep":"","tlshash":"3ec08cc5a0c2ad105a12641011af25e4a028402670481b029ca4d8982e230b08233e98","size":143,"data":"","first_seen":"2026-02-25T17:49:39.177185Z","last_seen":"2026-02-25T18:35:56.379976Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bc6bbdf2f84db8fb4f53167f95c5e1f5","sha1":"e72ba79f7cd501c3fd44c8b472e27d42663ef15f","sha256":"c0e75ed6139f1d87fa3beae291df75e57a93cf65c3548686b3a929c0e8403758","sha512":"c5020923da1f781d1b764cd56af6dc49dfdd5aebe6b15ca767605d2a9a25727c2275270a540a209dc52bb5d7800a5ebd13d90eec59a4989f1bfb72d7bcaa71a4","ssdeep":"","tlshash":"04c08cc4a0c3bd105a52682490af34e4a02c402b70886b438c94ec693e620b09233e9c","size":152,"data":"","first_seen":"2026-02-25T17:49:39.180122Z","last_seen":"2026-02-25T18:35:56.384031Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cdbfdba00ae4f898a73ef6063f2bc890","sha1":"6d7063cd41f5005eaaebf5c0450fa210ea4c9fe7","sha256":"ba7882dd9dbeed87618891483873bbe3a3a6cb18551ad3d1a44b2c827172b080","sha512":"d09c98672d24cfcdf7a4f43241317485f345c0653b1325099e2b110f941012ad2676e64c7fc1325e68c0f600df79caa00fac5a74c2244d6bf773babeedc36865","ssdeep":"","tlshash":"cbc08cc5a0c66d005a12641410ef24e490244026718c2b129c94d8582e230b0833be98","size":144,"data":"","first_seen":"2025-12-04T02:48:08.178673Z","last_seen":"2026-02-25T18:35:56.389507Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0d636c8429523d5f581684535428ba9b","sha1":"c29c261fd5527c5faaad67af535b31e8e56c6302","sha256":"85982f690ba4cefc75c36031467473410ee791a09668593075818c40d12aedde","sha512":"aa10eeaa6f88f3ad8d3af1b44935e2e3fac67325ea5c1dd16a97705f50b83344829c861aa1def3039c488044d0d7a0f90fc4990130fd3f991ac46e2e97272abe","ssdeep":"","tlshash":"dad012ea21a292082d72222a8acd1e21f8128333884c460ebcbcac002fb380011a8d38","size":224,"data":"","first_seen":"2025-01-27T00:39:09.432866Z","last_seen":"2026-02-25T18:35:56.369146Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9b72b4f696b3d45cfd964e4d6d62c896","sha1":"492e21d4c722e1cec6ace1c815222debb993a9ec","sha256":"fa17fa6ebc51750bc1f2c502b5c3d0a6ad785c3ed360e2064b9fabaed5c413ad","sha512":"0369475cb49bee90471d2274ff26b23045e467ebf95ffb804dc88ae78fd8c0202ad7594da716a908316eab574f4f34e145ee6e41477fffd6a4792f2e636a06bc","ssdeep":"","tlshash":"89c08cc4b0e22d101626646020bf26e4a028482770885f028ca4dc483e220f0823bed8","size":144,"data":"","first_seen":"2024-02-26T00:21:31Z","last_seen":"2026-06-04T03:13:22.565561Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","size":4366,"data":"","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e83cd56a06c587f94d8b0d0abf9f3494","sha1":"887937f3f7468f670bd619fefd0391dc81cea333","sha256":"5ebab1b00ca4dc67acdf6cda20765e7a7feb7b7090828d4d7d5d345f8638d8e4","sha512":"50e757f16d8cbcb24b10a644d269431e508092f0dc28b55def5fc0670aefaf85641436a5c569d1e3b56f02406b67ba7a84355f1b447c7bacafc78c21aa385616","ssdeep":"","tlshash":"d2c08cc4a0c26e001a22692050bf24e49034446675489b038c94ed4d2e220f08237e98","size":146,"data":"","first_seen":"2023-12-02T09:04:32Z","last_seen":"2026-05-24T01:03:42.879665Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/charting_library/charting_library.min.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-05T10:33:32.118542Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/vendor-WhAG4v2i.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7d8d5a86147437584d78ebfbbe7d2467","sha1":"c5919d92a1d6d49828898515e41dfc709270c632","sha256":"2a7c2d1e3f737f10c27848bc29ef0e0fcd13af5d3e147b73ac90c37076fed714","sha512":"a7bbc34dbca608b20fa64a93dcab3e6200ab1a98db05222dd3f06ccb1171aff0a478a7906ee35ad9690ae6c880087849bee5c3448ccff562b99069f25ef88438","ssdeep":"49152:7ZuHc9Rl83FrFnPXxJER+6jduesz3eQOHbxnUqs2K2NxfIWpdDZ1AjI+g4:+qejo4","tlshash":"e1a53bb8b651b07547a720e5007f0907e739690b704f84a8f669d8ea7cbc94ad277f38","size":2244857,"data":"","first_seen":"2026-02-25T17:49:39.167759Z","last_seen":"2026-02-25T18:35:56.373265Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2068bc4ffacebae80ecbe26251d2937c","sha1":"95461f0a0de720d7a44b438e27c1016025f37949","sha256":"69acb98f3a01acae2a71ff1353bd22ef76713dcc81ce122cc679a42fb5162e86","sha512":"964b539bad14b11ad68cac9a23fb781670bfc51073237e33b765d4490d170bd6e690bd30fd93e7c712f25fe1aac5cef587b6c2fc8e10453aeacd066bdbd5a5d9","ssdeep":"","tlshash":"4fc08cc5a0c22e101603a42014bf28e49024802b74482b528d98d8482e221f08233e98","size":145,"data":"","first_seen":"2026-02-25T17:49:39.174616Z","last_seen":"2026-02-25T18:35:56.375156Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2899f90263dc9b5dc2ae281989c39ac1","sha1":"5fd906b3ba42a640ac4163937a4c42f3da745141","sha256":"d58d03cc587dea1cf204e7972a7002d1fc3ea812e3495de5a74f5b7c6267b8a3","sha512":"90b7c59ac18b0c07f451302b67e1944f566210a7bf44962993404f45f9b5742c60f04f7df06b5ab3cbc11ada2b93888023a1e543ce5698bffa748118474f5df4","ssdeep":"","tlshash":"58c08cc4a0c63d101a06641415af34e490248026b04c1b439ce4d9482e230b48237ee8","size":144,"data":"","first_seen":"2026-02-25T17:49:39.185198Z","last_seen":"2026-02-25T18:35:56.385843Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2b699f6e9ac811cb6ce82f1dd6ba1a1","sha1":"8e7d69f74b24094414ab6709183384140d39c4e8","sha256":"c508c148d1068f4020eca9cb04b873745711bb45c4019110e3d22c53e995f928","sha512":"2d97a13c98a3df2da74488178cd16c49105a5fb3a572dc9281268db850a2475cbd702a52679a09d472c5b62129b3dc392ef3bf60af5d428dc38a6a58747f11ce","ssdeep":"","tlshash":"a011effe151ab0296303805e976b3411646250a9000a544173cc9e9dab9ab6dd0cfb8d","size":1054,"data":"","first_seen":"2026-02-25T17:49:39.173648Z","last_seen":"2026-02-25T18:35:56.380911Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-07T10:10:03.816123Z","times_seen":36377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-07T11:56:06.458308Z","times_seen":38687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d1cdd02950a78a2d5f9aab21d6a508f","sha1":"f3ee9f1055b3dde2970903f2fce8d06b9bdd51b1","sha256":"721c0b357c1d6602c2807170bc0cd6f3d78b63aabbaf62d4cf664b591b355897","sha512":"63ff7ad2217e99e60c4d9739fbcef288600bdcf63ac04b9f9bc673dad000d836f25898710eb8cc78bcaa9e2e6e5afeb8b9592dd094f13196fb60a30a89f8a4a5","ssdeep":"","tlshash":"05c08cc8a0c23d101a02a41054af36e490248827704c2b428da4dc4c2e220f08233ee8","size":144,"data":"","first_seen":"2024-08-19T21:00:08.518977Z","last_seen":"2026-05-04T13:28:29.524465Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/#/home","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6c693640b5bd5b7d37ef6d2d167b66b1","sha1":"53f0480f93101eb66f6e4bc3b5713ef4559815d4","sha256":"55b1479c34a0662f160d7063aa5ff2b184ddb6c2f74c219163cb2b6698814c6d","sha512":"85a53145f5c7b4a3f8b8950a9c69410ac1ea2e22f1e735b1c62c49a842d4b95889da0f35c7f36a773657a510e501c9b026fdb4164e26a6f3072fb4763bfe56b5","ssdeep":"","tlshash":"fdc08cc4a1c26e001616681155ef2ae4a0288827708c1b068c94dc483e320b0e233ed8","size":154,"data":"","first_seen":"2025-12-17T03:55:10.982276Z","last_seen":"2026-02-25T18:35:56.370348Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=oi0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=oi0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYvT%2B2v2dK9Te6GxH6kg4znlF%2FoIIva5Nl2ZHfSoc3FDenkaEi0BnSwPUsqidkNzM%2BYL8UsABdXfTb%2BOqHBAvXCs%2FlBgVWpZMljJY930kP5G\"}]}\r\ncf-ray: 9d394c542cc60d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e9d42d37c46d5df070a93446d7ae19fe","sha1":"0598f82bac05fdfce517d07b854f54706794f9eb","sha256":"c51374187f0eedeea856ace0e1f86862f20a18ab07ba916037b1e0d669574bb2","sha512":"928263cd4d32b5a7c31906096de56614748231cb82486f350019825a16252a2695d35bf523cd4c42a83fa74946af2fd504d44f2edbd2ff444f404c30865654b7","ssdeep":"","tlshash":"2c9002576c1c8242fcc300a5950a2304402431b42a6892494c59556580881a22044898","first_seen":"2026-02-25T18:35:05.699058Z","last_seen":"2026-02-25T18:35:05.699058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/kline","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 67\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYLDQcvwj2ZIApNBTU4I3hsnTHmiysDI68O7aSLpkbsueYZ5Sn6IAnqE7O%2FVB74uzsyMsGPKfDo87jTX9fIUgNYE6diyJzla2MN096wYwKoX\"}]}\r\ncf-ray: 9d394c55bd730d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82532,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"ed7c61bfae8470a8ffaaaa994942b4ae","sha1":"0a71113dde0d0a38164add7f7455a2532fa4c825","sha256":"f9c9ff2118f81fc93b707a3775d1a38d50328676c575fcd76eed79ff125d8f73","sha512":"890cc68c4609e5c32d59302be0cba7d221c53e1ff3514684bfd2e3e934db9b388ff10c6e23e627a62e5e09a2a13755ec13e46780dfe56085ca334ead2597fe77","ssdeep":"1536:R7WY2R8Ox7g5xEsi2O8HU5HjGBLfQ1WetGjak6ARCV2WsFoV4G64d18G9:R7WY2R8Ox05xEsi2O8HU5HjWL40etGjc","tlshash":"d08353fd0b5aa234d4326cc72fc7bcd0c62673c25defacd141aa28082e54766a6553e7","first_seen":"2026-02-25T18:35:05.699926Z","last_seen":"2026-02-25T18:35:05.699926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmpi","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmpi HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPQYT%2BbLTZbooEXLmmvkI%2FnxMG5yYh1FfEXrH65GISsFZiJtbmvFT%2BgqkeaznfNVAqCNpkcba3lAgyIfgbpgS6nCmwK1yEbqnwZLO7MqdD5X\"}]}\r\ncf-ray: 9d394c537c820d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f3fa2d69d802b6235e1e8556c9e31c02","sha1":"7efe2c2b6c7a526f4260609de6078140b19a56e8","sha256":"b88c794c2c61cff574f93cb01c806af44a6027ea51758ac0a5fbe44e62b1f0ee","sha512":"0b33cb653df3c9e67834561a4191157a53d5eb94726e3339904b19544e8e4377fd35d50fb7ee1f7a4bce91b26a1922a9b83301dab9caab6dd4d1c9147b982dda","ssdeep":"","tlshash":"6c9002555d1c8242a8c300a5a60a130600243160666592484d59512680882a22044858","first_seen":"2026-02-25T18:35:05.700875Z","last_seen":"2026-02-25T18:35:05.700875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6b7b7300162b4ab7a2d895866c338c48.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6b7b7300162b4ab7a2d895866c338c48.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8367\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C3EE24003635E4594F\r\nAccept-Ranges: bytes\r\nETag: \"4056B837C75220D94C6B66A58F12BDEB\"\r\nLast-Modified: Sun, 25 Jan 2026 18:42:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10371214004347718860\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QFa4N8dSINlMa2aljxK96w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"4056b837c75220d94c6b66a58f12bdeb","sha1":"a0a6d7c7324d711c63a37d8bef74b62974f795d2","sha256":"5cbed5c86aa4c6f54fd76230c401c3a44d79f17f92d97ea9f05737eb012584d4","sha512":"bbd5bec06643e06622706b35643252208f2d8e024a5fde23c565a9dacf3c52ec9a709aab25040e13300e5e7b63713fdeb97e770434c6ddc53095733cb31bfbd2","ssdeep":"192:+Qh2dQ+niL8wFbQ+RZsYR1IrRmHMOEqycCi:++2dQSiLvFbI+ywMOz","tlshash":"d702bf46c664f94ac776b9ec2393ec652a0f0e45386e22fd6838953b9f886c71518385","first_seen":"2025-02-26T18:31:17.523Z","last_seen":"2026-04-15T18:25:34.158314Z","times_seen":34,"resource_available":false,"data":null}},"time_used":3317,"timings":{"blocked":3034,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lr0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lr0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBZZk2NhCPTPkU5KEef2%2BQpy0pQXWLGdijucwbqzcdLSlIaw1952S6hGqQ7jzcdjGj76Rkj8gUqmIJpQR%2FWLnFPbqtf0YiV1zhfW%2BXJ3zPjH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50cb8f0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/vi-Dk3ZF86G.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /assets/vi-Dk3ZF86G.js HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-d56a\"\r\nexpires: Thu, 26 Feb 2026 06:00:24 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2055\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0GeOUkMam%2BWqruY9f7TdS3vqd5XvaYcQA1KaO6uJPmpLkiBgr87o6KYlewskGg6Gi%2Fw1KpPs6bMp8H2kJWcIWGPUMGJllO7S8U%3D\"}]}\r\ncf-ray: 9d394c50cb940d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54634,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (47457)","md5":"72be46109a348ee9c7e5e2841ac0e4c8","sha1":"a6d327b9c398cf4c3ed1b461fd24efa198382067","sha256":"f8e5f68d9c1f998cb8e016a1f1cebd7d31010f460b9d3307b7df137de39369f7","sha512":"8cbbe3b05d1e7c9982796f59b00aed0d320fe278d15107a0a7ba7c83cf9c4b4a38517e30a7e3c37924c584072da66ee6f0bf9c422e19b3d053c3ec4d632ed533","ssdeep":"1536:R+H1PNHFNI3vikSIoCnLkod23x0y9K+MFuMg/KAuw8kIL2S2TSF1Dhoj/:QdHNI3vitIoCnF8h0yd0uMg/KY8kIyS2","tlshash":"823308451d64b40f446e563ff1dce84a2aef684ad3808e591be80afa87817733f13766","first_seen":"2026-02-25T17:49:39.088247Z","last_seen":"2026-02-25T18:35:56.264169Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/resource/images/light/people.png","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /resource/images/light/people.png HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-ec47\"\r\nexpires: Fri, 27 Mar 2026 18:00:25 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2054\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zde5Y3qY6YyfRt07UtT70Rgos5VLAnuluBjk4ZnD4PJDaO0NnkbGZS3WT0Cb0gihEhF6tvf9sN%2BGmx6CfiIOECCbAKEQlmSekRw%3D\"}]}\r\ncf-ray: 9d394c516bcf0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 232, 8-bit/color RGBA, non-interlaced","md5":"d4ddb89bdc830b6b018207125101c6db","sha1":"e2fbe9dad87f26f108f499ee393e39b5f24e0849","sha256":"8271e2f317d883deacc55dc5c8b20dec4d58c2f3c4ceadd0c57e8a0d61852888","sha512":"81be8165341f6fb87bc757ef3bd4ddfecf0e51eb6fd0ab071b14fbe4dd7257cd0e0fb9acb2b00a185fb8bda81c45510e703051e2240540ddd685fce3d06b0558","ssdeep":"1536:wPUl1XP62VNsaPJXag5oRv/aGXYgghI0x7:qlaxX9Gaupo7","tlshash":"7643028d1b50bf580c46b33c399fec9264933cab4e210e882597b4378c7dda895ba557","first_seen":"2026-02-25T17:49:39.138288Z","last_seen":"2026-02-25T18:35:56.341093Z","times_seen":10,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/cb53c0e578764c12a07556a3e64ce5fd.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/cb53c0e578764c12a07556a3e64ce5fd.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 290\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C24C8B37383579D77F\r\nAccept-Ranges: bytes\r\nETag: \"8480A8D1C3CAF6A37F7B68B4284855CD\"\r\nLast-Modified: Fri, 16 Jan 2026 16:50:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5412729922435457759\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hICo0cPK9qN/e2i0KEhVzQ==\r\nx-oss-server-time: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"8480a8d1c3caf6a37f7b68b4284855cd","sha1":"3b34b2785d3184061c81cdc7b56fd30474b0d6b1","sha256":"46f74374f08962e2aed679583b2b8387712732062f9c25dd497b383f98e82f00","sha512":"2e695545772eae4a9a7b79c47d3f8c035038a79c24ebfdd0da1ffca3dabbf6527908862540d36209decbc1a87a52254431675809f1f769f10aa7e0f2a878fbd3","ssdeep":"","tlshash":"b9d0c2a462edec08c6008568016f3586200a60d663c553abb0b0782a320c6eb3d3017c","first_seen":"2026-02-25T17:49:39.093801Z","last_seen":"2026-02-25T18:35:56.315926Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1676,"timings":{"blocked":1390,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=ma0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ma0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eH%2B3bgLfnqskb2faQj2vhckTlSJ9OfAK1i36ChScd8vgr0ZPiP2WcRzdc87ukbEBZ3qXXstRSASK2PyoM1vf4Mhgh3AULz3LNHlNwoVy1rcf\"}]}\r\ncf-ray: 9d394c532c6e0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aea8bdbdde3a1ab05f7230920c6cc148","sha1":"c56611f534b6621b93d1b005c2d5eaba4486700c","sha256":"da724111befc5732d6d9c13840e0e41cdf8648e4af51f3744fd6513cb11473e1","sha512":"f9c940b56d4679d935354c5d35e3267af6fae3b1229c80fa925ae80558b340b2634cc3f9f7934ad81ec7538b6f0b8b5c7c2fecd6233de212a1c2f17f65f1b9cf","ssdeep":"","tlshash":"e79002555c1c8242b8c340a5950b1204142432603664924c4c5d513584881b22044898","first_seen":"2026-02-25T18:35:05.705668Z","last_seen":"2026-02-25T18:35:05.705668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/e86dbfdad56643fa8d04888f6b652255.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/e86dbfdad56643fa8d04888f6b652255.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2808\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C3AB4B813237BBC41D\r\nAccept-Ranges: bytes\r\nETag: \"D55DD75446D505958E5210985B246BED\"\r\nLast-Modified: Fri, 07 Nov 2025 14:46:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13943290759176926731\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1V3XVEbVBZWOUhCYWyRr7Q==\r\nx-oss-server-time: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-06-05T15:12:51.527019Z","times_seen":914,"resource_available":false,"data":null}},"time_used":2921,"timings":{"blocked":2622,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/58cd51becf1743cf873450424cf756df.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/58cd51becf1743cf873450424cf756df.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1307\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C36AFD363632F343D8\r\nAccept-Ranges: bytes\r\nETag: \"4119A4119257947D75974EE50258B121\"\r\nLast-Modified: Fri, 07 Nov 2025 16:58:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16156932685160513603\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QRmkEZJXlH11l07lAlixIQ==\r\nx-oss-server-time: 12\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4119a4119257947d75974ee50258b121","sha1":"3485b77d3dd2df3d105f88462a0baaa1f79b3e13","sha256":"689f4313c40e98326ad30bdd24ceb7bd273b32cc0c080ef1528d425937bdeb95","sha512":"6238658ee4380acdc610ca1786d13b3a0b8265a5e32514690547a0cd9d9db1fb940dde7c9170c71d5e887ae715fe6b4b85ca9712b216a0661deb749091c24d85","ssdeep":"","tlshash":"7f2186a6c2869b1fd97ba12a87e6c185ac972145a942235cf60448cd30a814cf9d165b","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-06-05T23:30:46.31975Z","times_seen":444,"resource_available":false,"data":null}},"time_used":3253,"timings":{"blocked":2945,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmni","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmni HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Su2BNwUw7HHbA8W038JQwtpn1IOT%2FKGJ1hld5uXRPyewV2yQOn%2FX8znAkWr372UnOzfD%2BTUTbt6d%2BiW%2F9mIB3kfsjg7OENJledozcPyld38s\"}]}\r\ncf-ray: 9d394c53dca20d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1dc114421da20f8b35ad920abaf5b82e","sha1":"68c82427362a70dd39b39ac980a7f19d6a2f6eaa","sha256":"09eeccc6f3854412ae1a17d48735baae1fc6eb34dac77569bf29cd77c66abfa9","sha512":"2412c6353834f5e48abb5cafaf8cd4f8853ebd64d2adf9804ddffd95d7cd9a46d38344fe5c08c46c44f5fe78b5291c481b95d502b34b93dad7b73362a5c9fde3","ssdeep":"","tlshash":"919002599c1c8252a99700a5a50a121404243160262492584c59512595c85a32248998","first_seen":"2026-02-25T18:35:05.708845Z","last_seen":"2026-02-25T18:35:05.708845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=rs0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=rs0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbXjiKgD9vfXt%2F3b%2FqI2l9W3JcHnbH6WxO99q09lqeGziQqzUFWLW%2BPYpsHHSjsKepmzYuvMa861XK2qwKsg0TtG7h98O9MLoF5aa8nbb4k1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb8b0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=ta0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ta0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=245d9SgGO5Z%2FOea9CwKO27fLNyl8FROAP39cTZuJ49kk%2BvRs9BqZReWc54yNvm73iYHW4bHJTQY1biaMKr2DWxmCQKt%2Bx9z2%2BDU0rg8t74QL\"}]}\r\ncf-ray: 9d394c53dca60d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e6b0225c16abdf135952d8b76be894f6","sha1":"9ffc056953aa0356e115e5afb7b97c5e6cded238","sha256":"2f937cf5a7f09d30b7547e84365c65f2aa27b363b2e59baacd75f65d0f3b7ee7","sha512":"33ff6d0271ada8feaa9a35bca2d2f0c46764f021bbf6c4195ce15cf434520a501c155df7a9818c49e64c253bd2c46fe9b35cf12a2de0a0dc26ceeb371ce9e992","ssdeep":"","tlshash":"159002555d5c8342a8c300a9950a220800243571266492484d59523681881a22048858","first_seen":"2026-02-25T18:35:05.71002Z","last_seen":"2026-02-25T18:35:05.71002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTx%2BWOyONfczUNiBOjBq2pTxNe%2BTou9dl%2BYmuG60BCXr%2FR9vdXJ45GU%2BvLSoduF8ZsHsHbwE2LY88G09BHH5CnK0JYLh025iTtT3hnpcmMBf\"}]}\r\ncf-ray: 9d394c554d350d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-06-06T04:00:03.346435Z","times_seen":257,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=xpd","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qg2WWK%2Flp1pwAp5dY8%2FEsZFS3Dz72sSB0DP0NPUGky17XbRkfP11ExBh3PyDcyYo70E7%2FeIRv17YbYNtU33yaIZFQ2up87nfnXRZkjD3x9u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c506b590d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=ma0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ma0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTYcxM21K4jc3ltSZLFSiXe7z5rtlM5nVec9GRGfQ0hOfm7%2FY8svzJ5xpXFp3Pa151QOB%2BOVzDepCOylZn2xznkwgsJ9EW8bykTJKe7t9LPm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c507b620d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=sf0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=sf0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gauW46xxXHziH8xNqDn1pOnOAq1NkgeS%2FYkcds0j0HtJzid6qUznrqD%2BbD47UtsJ3YXJ5ssyCyZmvoVGkSRUch5EkoHI1N6mvGAv28XYCYB3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb8c0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/296b263c40144fe0bce3fb29aa94ef49.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/296b263c40144fe0bce3fb29aa94ef49.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 450\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C26AFD3636328D42D8\r\nAccept-Ranges: bytes\r\nETag: \"AFBB5060C532B39B25A89BAB3156157A\"\r\nLast-Modified: Fri, 16 Jan 2026 17:12:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7663316858699226200\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: r7tQYMUys5slqJurMVYVeg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":450,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (450), with no line terminators","md5":"afbb5060c532b39b25a89bab3156157a","sha1":"d258e0403b6d3db02a9683bf49a758acc2951cb3","sha256":"2413ec84638e83f52b693f6228425070017cfb100c55a70ea3dc1eeee3d398f8","sha512":"94b24716df85c93e17263e2310672fe72de57df4facff3476867d687d68e17380f86418df08f35ba78825cbc99470391fb0dff9dacc43c86f60bebeb2155a987","ssdeep":"","tlshash":"b6f0dc42d28c826851438ba0bef0b260b22f206ce8dcb3e494d45720344b689ec28568","first_seen":"2026-02-25T17:49:39.153475Z","last_seen":"2026-02-25T18:35:56.266497Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2172,"timings":{"blocked":1874,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/ac794eaf094846b297031e9884204508.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/ac794eaf094846b297031e9884204508.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 908\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C1C390C33335CDA220\r\nAccept-Ranges: bytes\r\nETag: \"92412250874344FABCFA16BAA39E1650\"\r\nLast-Modified: Thu, 05 Feb 2026 01:56:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7105937748141017433\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kkEiUIdDRPq8+ha6o54WUA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (908), with no line terminators","md5":"92412250874344fabcfa16baa39e1650","sha1":"8074901d45204e38aab6a9b5baf3d40718d67ca5","sha256":"2e7d7fb86d4e85c02385cf16848ebef892059199bda7291fe3368897028fece6","sha512":"ac01703244a50a983b8d0de7201fa833e7ffb5b031f047c6c8014616d0f2483c07278607b58f0acb31a6f2f1e4e78558729d42e670f048ea817d95131dafd391","ssdeep":"","tlshash":"2f119ce7e7c894989519cfc49d1268dd276d29d97de082cbd3344f34a314b6dea80d38","first_seen":"2024-11-05T04:41:28.398116Z","last_seen":"2026-06-04T00:03:21.620988Z","times_seen":69,"resource_available":false,"data":null}},"time_used":1485,"timings":{"blocked":668,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b3ad287d0b7141e6bfd35a4bdacd4db1.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b3ad287d0b7141e6bfd35a4bdacd4db1.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 491\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C2AB4B813237D2C31D\r\nAccept-Ranges: bytes\r\nETag: \"04D01F0CB8AD295C3C9975772D8AF4E6\"\r\nLast-Modified: Fri, 16 Jan 2026 16:38:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7449483460414735751\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: BNAfDLitKVw8mXV3LYr05g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (491), with no line terminators","md5":"04d01f0cb8ad295c3c9975772d8af4e6","sha1":"09462cbcd57935531a8854cc5dc53a756248b6a0","sha256":"a89320d9661043bede3602144128ff02b14deb044aa427e27c449128d5c5abf9","sha512":"af119c0d0371da415be1f217a686c6b5041cd5ee32339f98a279ebf90fbb085e8899061b9a74c89531d9519af08998b3766c795ecb9efb2c33be36afc4e0b981","ssdeep":"","tlshash":"a7f09ea0f7ddf48c90118791db193152615fd4f4f6aa02bd39d85330b9465cedd12198","first_seen":"2026-02-25T17:49:39.119166Z","last_seen":"2026-02-25T18:35:56.363568Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2138,"timings":{"blocked":1842,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/f93a70ee214f475384f2f9a08b0511c1.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/f93a70ee214f475384f2f9a08b0511c1.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5321\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C38B9044303359ACF4\r\nAccept-Ranges: bytes\r\nETag: \"E243D03F847E04A3BCAF9238D2D79587\"\r\nLast-Modified: Sun, 25 Jan 2026 20:21:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18211197115078776784\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4kPQP4R+BKO8r5I40teVhw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e243d03f847e04a3bcaf9238d2d79587","sha1":"badc33000a29d7c9677f95c4155a49609eee722b","sha256":"786590835f83f15e22d1d73a2147878b00625e91912ca04e8e0c6775c56dea4a","sha512":"798f634225925aa9e02d11634c010de038d70b0fa197ee014443ae9ef782f0a90a35b18a48ee4f417380acbc8e1c9df2ded77ddba10c0fa7d1784f28a3fbf013","ssdeep":"96:dmY//imlSbkkYlFPTQOqidjRGZRIMHp/k7uOrNiUyrcMUz:8Y/qmsIP0OqiUhHpMFrkc/z","tlshash":"c1b17d106cd0e052d9ebcf9ea6959e736072cd5a5c0ae24d3a08e3262f7f07c42e90e1","first_seen":"2025-04-01T12:16:01.548942Z","last_seen":"2026-05-28T00:26:39.879239Z","times_seen":133,"resource_available":false,"data":null}},"time_used":2985,"timings":{"blocked":2692,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmzi","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmzi HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcgHUYrM5O9bbqhOJtBrl4em3DMXGyxFlavSazOL8%2FElhVv2L3vLZ4FiuR9vFgqGujI1yXtgI2Nven9CN2w%2BA3F%2F3w%2FH8P6ltXJKGWjjdqPR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c509b730d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=xap","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsBOdTDHEhuVhXYwUMONK%2FIgT%2BbS%2F220A9%2FJVKsA%2F0SH6j09aGM5ywM%2ByPCnbxuMznLB27Wt2UGpLGAsduMwqDbLVPJs7OLswStp0Pvz5AX1\"}]}\r\ncf-ray: 9d394c532c690d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e496ef40036235056b47348c57cebb","sha1":"f5a24700a5e37a21df36321e768a1dea43137832","sha256":"5d0b01700d164c943a8e819d7d716389404ebcb30e6bd92b9a2e42f66ebfaa41","sha512":"a2ccca20509ab113b77fca53d69b7d27dfcf378e2062b9202257481365fbc899ee2d02a097295092a073ac216a4bc4d93e48be115d6fd3c0c32c3a9046ded124","ssdeep":"","tlshash":"769002555c1c8382a88344a99546520410353169262493488c59512585d81662040858","first_seen":"2026-02-25T18:35:05.714164Z","last_seen":"2026-02-25T18:35:05.714164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmsi","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmsi HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8oCFP1FT0DGskqFHljjqim1jDicp0dwGNBtTnSPgXOKRFAUaNlRmng1Xy7Zz0tyTngKEjnwhBf0V8rVRa2wQn5TTj2Kb5171Jd290GNL83i\"}]}\r\ncf-ray: 9d394c536c7c0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"54b8797a8e65ae598960f34f9d98dfd9","sha1":"6f49020c4d94fb7bb220620ee2e9396f14d3c9be","sha256":"87111308d1a4c7c2dac83f04588d5a9e6ff8efcc56246a7663675a390f2c08ee","sha512":"359e2c6dfb0dc0e96f114770129b4f31ede67d9f3a40b2055a065a39b7a1d69671aac75a67b3d038c4d1c273e2313c074d5e6b2fb19a9e42dc369261915ee858","ssdeep":"","tlshash":"079002595c5c8242a88700a5960a26440024356026249258cc59512591895b22044898","first_seen":"2026-02-25T18:35:05.715029Z","last_seen":"2026-02-25T18:35:05.715029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=cj0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=cj0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9lhu5RYvaj5G85xZ2bQ9paJIhwgUii1RIf4I9Qc1oA6s63m99q5vmErwz1FLs4nmlvQkaQ%2BQPO1zPAUXOU8KFvlIwrUYwT0BpDoaDuRJvhJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50cb900d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/resource/images/light/coin.png","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /resource/images/light/coin.png HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-52cd\"\r\nexpires: Fri, 27 Mar 2026 18:00:25 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2054\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWDBJ6sWyBOOxeVOtqLhrs5j5Lcb0QybsVB6p2gm8Pgo%2FJ7mzgFw9k78ODW0UPBc6HjRiClHq05ceIB3nWJ065yDQw82VF8GJQU%3D\"}]}\r\ncf-ray: 9d394c516bd30d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 90, 8-bit/color RGBA, non-interlaced","md5":"da8851658201441d3bb5d23506b65470","sha1":"9d6a57b368c87bcad6ead244ca327f721dc94eb1","sha256":"aef9802c840eee69a21f0784931c92703d91a8f155f6e91f56ba83c78219803e","sha512":"cabb34b01778d731ea051a8a586d62e074d8e52b87880b0cddcac6a9baa242904667193e8b05e9f13c122f29168a707ef819c10c768b5c57d9a9bb4590795ddc","ssdeep":"384:+hgjd9h6zWXrz667/t9z8hh9QdOfsdekCmysFplDJbkvHhhHcBIKcuuvlV/k8RM:fjvh6KXr7gM5dkOZJgBc2KcTH/kmM","tlshash":"6b92e2c6311c3dedbc05ec3d19518b5ac64f630a4813552d062defae7b162f46e6e863","first_seen":"2026-02-25T17:49:39.165724Z","last_seen":"2026-02-25T18:35:56.257286Z","times_seen":10,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=pf0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=pf0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qphMmZc8S7%2FI2c5SdXYhqKHMKzh0rxBT7SePItNqmJmMcwyk2jRQ%2BQW6VY7YpSLlxS03NxFjv5sBr1y6l%2Bwq%2BHqUs2IIMMKfsw5U8Kcdu%2Bap\"}]}\r\ncf-ray: 9d394c53cc9b0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"55bf86121200851779cc5d1dfa3de3a5","sha1":"7a967e93cbb74749e65800d1a51e64112f2895f5","sha256":"f9959bb8a6b6a202eeb05c3aacd25b56331844b6a9439ff5268998ffc635f28c","sha512":"5afffa154bb1f56d1a4a59a8e19881a4ed4ab2cf719c91946318ac3e087aada28b0c3b106663df9b962ed0120e8f5761c8fdec1660c8170018c351827c46123e","ssdeep":"","tlshash":"fe9002955c1d8242a8c300a5990a220800243261266492484c59512580c81a26048898","first_seen":"2026-02-25T18:35:05.716551Z","last_seen":"2026-02-25T18:35:05.716551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=cy0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=cy0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0K%2FDXTk5KZARfI1aTdORLjiECsyqcDjaItZAzGdoYpcJT%2BbQDBwnRtUh88o%2BW4D655Pkp5svkPXrjjp6qor38RxCWongWh5gKlKCEGjuLZu\"}]}\r\ncf-ray: 9d394c541cc20d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"55fa39f2d51fdd23bc4cf24aa822cd97","sha1":"5509e4a876bf754cbaea9e94ee3d78f905287c2f","sha256":"6a8c57426c6fb9e51acb4545e73c88de6153f27f51b702cafff52c2945edf93c","sha512":"5f075abbf07f1ced18f481a4be9aae88471ab6004427e6bf47d33ce712a4f8b9203b623971195151703354629a822a6f76987038513e2af87d75a24b80774532","ssdeep":"","tlshash":"fe9002555c1c8642a8c300a5a60a320841243160266492484c59912580881a27044859","first_seen":"2026-02-25T18:35:05.717428Z","last_seen":"2026-02-25T18:35:05.717428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/kline","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:41 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Q7bikfYhqmlh%2BsB87mXvOfnvEk1GvWtQGeOA2TdODy6HHmN2%2Ft7DWQuUeGZVwKXlg3xb67j4erF3jGcA7Jnwg7149tAXLYZJIZwHlEeLDJa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c544cdb0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=sa0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=sa0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YoZ5g4myjmXXhp8ZMPC81%2FnFwc7FRA2zzZXnqWmIYNoRopcWBfPSpLYlOkp6MBgPiIcnnQjSdBrK6YzBOntPTl92SXU%2BgYe0%2BZCmwbNwIFR2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50cb920d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmci","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmci HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vS3FNF80FYGBGdv02TOzsdH%2BSyA5mK%2Fq9kMCaJNDGX3u2Se3rkDsL1uub7B5hVRYEHjs84NLyAJObaZJMy1l0ht461lmTbiAcGmNTNgJmNxH\"}]}\r\ncf-ray: 9d394c53ecac0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3d04c3dfc0909407a1c6ffd0b9a79058","sha1":"0faf559084f5daf4680a4cf28d8e5585f823c8bf","sha256":"cffdd9cc11b6fb2e518640fcaf17378f6b4502003750ffdc9d587a4f98270ca5","sha512":"37918bde9d2c89592ac1283e4e26087a937168208717bbdcfdd4f1073342574f40f61a1c2d5bee467218a7e308936473eabe5761fcf6e533eea0f824df6a9957","ssdeep":"","tlshash":"139002565c2c8346a8c310a9955a270400243160266496884c59512580891a22048859","first_seen":"2026-02-25T18:35:05.718316Z","last_seen":"2026-02-25T18:35:05.718316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/charting_library/charting_library.min.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-2a6a\"\r\nexpires: Thu, 26 Feb 2026 06:00:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2057\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXrQdvagQmrq6Hyh4f4YbdxQGAREnYDw9%2BgjvgAiwo5623fv3glgdrg9AxU3FPwBTiAz45Jw65MqZoSU2NdeuBmesYgpQxpkwTM%3D\"}]}\r\ncf-ray: 9d394c447ef20d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-05T10:33:32.118542Z","times_seen":518,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=sr0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=sr0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUC3t%2BK4AZjX22fbhTavVNMnRCfqfT6xv4MMgJ2vQjAJbE8ZBNiN3J6WDNV63TzfYeaZ81pa1w%2BiYLF0o7j8rPHzyUbUjdN6Dhl47Wp3Z47X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb820d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/resource/svg/light/service.svg?2.2.1770477070317","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /resource/svg/light/service.svg?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-5ffd\"\r\ncontent-encoding: gzip\r\nage: 2054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyAYEBg%2FMRBey8R1gMG%2B1dnQDqtlU5Q70AU9AAETkllrRraEZg0wMYk4z0RY5fFacZgYuVUnG65pZJWI3OV4p089D%2FiMogci%2Bcg%3D\"}]}\r\ncf-ray: 9d394c514bc80d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24573,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cd853da828b851603870f0d3cf3ef38","sha1":"5c63345180e5903af285a33e5a0d3f7ca605fdee","sha256":"069f5d494dba6b80bedc0bcf5835d68ef020b10472c776f185a496a57f3980cc","sha512":"772c4a20c2384bdec4c1ffe4381ab0247e73b68e75f3fa02e0469945257b4a01cd7d717336c660b7e7a6b55c01a18d0dda1dab2f2f3eda820221490ebe58118c","ssdeep":"384:b8ChglOiH6GKAgYJ37JddRo0vmNdvGHiQSq:9hEG5NYJ3lddSxN4iQ7","tlshash":"4bb2393083946663f150cd1c2216be63426670ff7effaa44df8a5a32346af814f9c659","first_seen":"2026-02-24T15:49:18.905144Z","last_seen":"2026-03-02T23:08:53.805331Z","times_seen":22,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/71f1eccbd0e440c58ae0e9cb452674c3.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/71f1eccbd0e440c58ae0e9cb452674c3.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 658\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C28B90443033A2AAF4\r\nAccept-Ranges: bytes\r\nETag: \"F056C3E752DFAD493636C51D584791D3\"\r\nLast-Modified: Fri, 16 Jan 2026 16:49:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9596945098777891148\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8FbD51LfrUk2NsUdWEeR0w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (658), with no line terminators","md5":"f056c3e752dfad493636c51d584791d3","sha1":"084398950e74677413e40199a6365c8aa19e9197","sha256":"87ea9ed20103970782731b2f32d2399034159128e5694d6d21c4de0f36b2d573","sha512":"3a6b0afb49f67380504ee4da63d0b42943c34449436df3a9395a0ca13ec795557bf559cc87c74b14a2246c5f1f46b7c3bbbf2cc6250691ac031fff7a44d63b81","ssdeep":"","tlshash":"290149fbbe5c628c140b89a89a04f4a3035e697976c1d370699cc5f065433cadc43a44","first_seen":"2026-02-25T17:49:39.104679Z","last_seen":"2026-02-25T18:35:56.311288Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1651,"timings":{"blocked":1356,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=rm0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=rm0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7njlJbwzJHjqBQXqk9B55ic7DMZQcBI0zlxzflJP6hQA5BiBZJyUPJAiDM50cqDCTlk6FIps8BlFfCnN1JTk5n3uyS1SHBbdZY62DXGv1uq\"}]}\r\ncf-ray: 9d394c53cc9e0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a3be8f82ab3de6044cfef3bf67719213","sha1":"23c9392b404bf409ad0d44a2adbc0885109b1064","sha256":"5b21d03cc5aa8598ab2596f73f2b828b822c72bf609a35abe0143550363bda96","sha512":"c092a349c557f64868f18cf7b199ccc1520cdf2338a212590d8bcd2e82e379d5f087849030eb56750103f91bf27d6c15c5fac4b7922360bb846427add3cfdc6c","ssdeep":"","tlshash":"c99002555c6c9242a8c300a5950a1245042431b03674d6488c59512590891b22058958","first_seen":"2026-02-25T18:35:05.721027Z","last_seen":"2026-02-25T18:35:05.721027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/kline","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xz1S%2B5TDpN8i3i0HOno0IcbLulBMxGpmgOTNj9S%2FKJkvbQcCNUi1YPrfBTBEryfsv0IMdibuI5XSAZJ3JhQfxn2QkAnjm4%2BKN5th0G5m%2Fy6T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c544cda0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getAllSetting","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:39.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:34:39 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mEVH4Gk8f6DX3sgH9zlc%2Bs%2FGtSrc7becIfJi3fwkxTpCJ1poyIbskRV4Hu3Ecjg8ah%2BHkvRsoQuQXn1aVtCJf6ES5rJ%2F5TeLFB9a2KUqIDL\"}]}\r\ncf-ray: 9d394c4bba03bb02-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":66,"dns":5,"connect":17,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=pm0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=pm0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sS%2FqKaJvDanr70X0qKHE7ReyuYd4dYCxvzWxBVltER%2FqA9744YhpusMqiy6zYHSp8esdwAfDa3DPYmJCuPT8InnU4H1xxJhqY6s78xzBru5T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb810d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/27e5a59c855948e39cea04f8fb8aeb0d.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/27e5a59c855948e39cea04f8fb8aeb0d.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 510\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C26AFD363632E042D8\r\nAccept-Ranges: bytes\r\nETag: \"9AB5FC019E2670EFCE1C5A0209EE62AC\"\r\nLast-Modified: Fri, 16 Jan 2026 17:02:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13766208026901616558\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mrX8AZ4mcO/OHFoCCe5irA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":510,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (510), with no line terminators","md5":"9ab5fc019e2670efce1c5a0209ee62ac","sha1":"148347046a2de81439961002f9b287193eb7cb55","sha256":"d4ea2bb42b6e9b8a69ddcf6525bc79e736f39ff82bf0d07aa7ce9595dccffafd","sha512":"be5a0ef64c4bce2e9466390dd420a264aeca1e831057be264c0d3f5e4408d7e0c1c5bdade5de5f4d3e1f8c7b34ee338cfc045cf3c49d2029b89fe98fc129e7a7","ssdeep":"","tlshash":"5af09eb9b369059c640647608b391161271fb86dbbc327e857cac6323016ad4ec9596c","first_seen":"2026-02-25T17:49:39.123336Z","last_seen":"2026-02-25T18:35:56.328022Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2441,"timings":{"blocked":2143,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/ef9431da51ee45929dce72038fd1cef0.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/ef9431da51ee45929dce72038fd1cef0.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 953\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C36AFD3636323243D8\r\nAccept-Ranges: bytes\r\nETag: \"92F9D15BE55070C0F267E7B9609211DA\"\r\nLast-Modified: Sun, 25 Jan 2026 18:53:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12504633752802818255\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kvnRW+VQcMDyZ+e5YJIR2g==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-05T15:12:51.676417Z","times_seen":1508,"resource_available":false,"data":null}},"time_used":2688,"timings":{"blocked":2385,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/24d21231ceaa4bd1bccabd891f3233e9.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/24d21231ceaa4bd1bccabd891f3233e9.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2560\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C34C8B37383571D87F\r\nAccept-Ranges: bytes\r\nETag: \"CB84D3CA48A52E3DF1025731A8BEF4EC\"\r\nLast-Modified: Fri, 07 Nov 2025 14:46:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6590887318613304211\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y4TTykilLj3xAlcxqL707A==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-06-05T15:12:51.597661Z","times_seen":1502,"resource_available":false,"data":null}},"time_used":2734,"timings":{"blocked":2444,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/type/defi_activity_type","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSk17ell5kgqTaAkcbDe8qKdDDdQwJE%2FH1%2F1PEt7lV1W9lkp1EXB4yt7ayRAo1gARJ%2FPaTRdluiPGa0U8f6xk6O%2F%2BVxsqxJIpCP3EdhuwQa%2F\"}]}\r\ncf-ray: 9d394c552d290d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-06-04T04:33:14.419392Z","times_seen":666,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/dea118b288f944c995a42b939da46db2.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/dea118b288f944c995a42b939da46db2.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 404\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C3C390C33335FFA420\r\nAccept-Ranges: bytes\r\nETag: \"5E22A9302A4383454BFE530F0DDFFB53\"\r\nLast-Modified: Fri, 07 Nov 2025 14:46:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18276743004581408811\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XiKpMCpDg0VL/lMPDd/7Uw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-06T23:47:44.166187Z","times_seen":947,"resource_available":false,"data":null}},"time_used":2785,"timings":{"blocked":2514,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=zc0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=zc0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haVPp31eSJglK1VvI0vIlerANgMzwQmKluQVCmvpZTRcgMij2q%2BAfXHqzSpx3PVFr%2F40kHE%2BaRKX0ootk0HMQk1t6I0j%2FTFgmCR6zSZVHk9w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50cb990d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/2d06b52ea576405b842ebfd94effd5ad.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/2d06b52ea576405b842ebfd94effd5ad.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 916\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C1AB4B813237D4C21D\r\nAccept-Ranges: bytes\r\nETag: \"205321AB41EFAFD9DF52606ECF9669D6\"\r\nLast-Modified: Thu, 05 Feb 2026 01:55:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8808752217629503937\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IFMhq0Hvr9nfUmBuz5Zp1g==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":916,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (916), with no line terminators","md5":"205321ab41efafd9df52606ecf9669d6","sha1":"4521bb4143b039f52a1625a102fbce86ac8c8347","sha256":"e9c10f7e0525477e11bb118275904c3e1b0bc7fe79c3e9b1490a02bf3cefb048","sha512":"0656ca9735beaf79cbfa9a36daf00812fbdb65e16ae5f87b4aa17969786dc565fe83639eb571786cd9cf79df30558dd3d581679b423107a8b9f8a88f0b9447c9","ssdeep":"","tlshash":"681100ebe39d8058c5468e8cae1368cd335e34ac7cb145c7d3b88f206715b68da01d38","first_seen":"2025-07-30T01:59:54.195894Z","last_seen":"2026-04-21T18:05:17.624021Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1620,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":595},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmzi","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmzi HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dem%2BC%2F5Pv%2Fdg8R6SDqn3V9oheDISp6hZ3s4KIsAktcTl1bsWdoofKnUQ7pWj9erbvgHJpOoo5MiI2DeUCvbE%2F1%2FdbdE4lyMiy9MLbUL8%2BuFx\"}]}\r\ncf-ray: 9d394c538c880d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"79c967727762ee41cc5b6ed7d74e5ad6","sha1":"0ba79ec2ce40aff7a5ca5aa2e4286dc490b4bc65","sha256":"dee8e2dc49d72a716cbf1034e102a28b542273b8a1b5b6acd435abe9f8fbc2ac","sha512":"cc8e20a9b44446902aa06934c0bbc11bf9caae8901673cc81993fb00578b1441e0ae190524942a599dcb7a5af8117cbda3a3bff03bd7701596a7439ece1099c9","ssdeep":"","tlshash":"029002555c1c9242a8d700a6950a120414343160366493484d5a512580881b22044958","first_seen":"2026-02-25T18:35:05.725492Z","last_seen":"2026-02-25T18:35:05.725492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=ap0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ap0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JEoqrREriUICpu274wPgXkBkMyV5%2FRyoUaqbX%2Fx2wK7sZFFZkylceZHX3Tgnmx%2BCW9Qe0iPUTM85hHCKSLu9G6K%2B0sqlGRfnk5%2FmRDEQkfhN\"}]}\r\ncf-ray: 9d394c539c8f0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6825f6d98f2755b1ca4b2f08d30f3d00","sha1":"b2bc0d41fafa4d46d7e0be2ce15a3fd0fae4cf4a","sha256":"e69826c448982782de6e570eeb0b1676c1a9f09d386deb7b8df7057df0bf7e9d","sha512":"dfcbefa152d9d9ba03ae6dbf9acf221047561fd6c3a75159e8dda96f63022f5fb1a654a14b27a15ab7b68046b12130bae4368f89945c7c3615b068048eeee9ba","ssdeep":"","tlshash":"639002555c1c8292b8c300a5950a5204002431a476a492484c5b512580c81a22048878","first_seen":"2026-02-25T18:35:05.726183Z","last_seen":"2026-02-25T18:35:05.726183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/platform/lme/config.js?1772044479195","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:39.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /platform/lme/config.js?1772044479195 HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fq7Hscla019bWGfcJSl5qD4apO8QltkSYNUsdyxcIgxckOSi8tk7H%2Fb%2F2cHQdPGT2caNn0%2B2djYRyRL54x3fsqIdMkOIlvJciLc%3D\"}]}\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 26 Feb 2026 06:34:39 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"698755ca-c6\"\r\ncf-ray: 9d394c4b19440d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"bc5e42a85bae365fe474fdab373b29ef","sha1":"6d0d8d64011c9b0be7706e9ee55340f89b3b4f5c","sha256":"cf3c3d44f757832cb09fd29e22f204052399d862f2dd7c42471b4c08778c0cb6","sha512":"a80efd9fd9bc3e4516cfc289b4c8b027c4616dbc1ded6d4324381e915f60692ea0bf0d340a945bacafd7a50e8892eba50d386b93b97cf550144ce891add15b18","ssdeep":"","tlshash":"4bd048ea26b597093d31662a9acc5e32f8428337c95d421fbcbc6c002fb380415a8e31","first_seen":"2025-01-27T00:39:09.394406Z","last_seen":"2026-03-29T04:39:26.611157Z","times_seen":20,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/4bec3271ee9640f194e7d2266bf807d8.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/4bec3271ee9640f194e7d2266bf807d8.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 487\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C16AFD3636328B41D8\r\nAccept-Ranges: bytes\r\nETag: \"A051CD811F50E0C11FAAE41A6D13AB90\"\r\nLast-Modified: Fri, 16 Jan 2026 16:43:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14518300890900350056\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: oFHNgR9Q4MEfquQabROrkA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (487), with no line terminators","md5":"a051cd811f50e0c11faae41a6d13ab90","sha1":"d3f12ee72c835fa42d3bc5c7d564a5e4d1fe2759","sha256":"26fb535c1a8d8b1d078d82b659d55057a64c21f21d408d693fc37533b7fd9a2d","sha512":"c25adabc8a9eccb110982ae02ff8d22e844209d878e6455b04c3b128ae0b7db3131f198543772463bbee6f956ab2cce5868a4d5b93ceff14b4b7510dab1955cf","ssdeep":"","tlshash":"39f027b0731c08ec5b1ec2941ffb2b1102b9f088bab801b0e5ace0593106a77ec52e54","first_seen":"2025-08-03T18:12:41.841292Z","last_seen":"2026-02-25T18:35:56.332464Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1318,"timings":{"blocked":1020,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/7cbb6d29d9224fe69a025ca9c0372cbf.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/7cbb6d29d9224fe69a025ca9c0372cbf.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 290\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C3EE240036356E594F\r\nAccept-Ranges: bytes\r\nETag: \"8480A8D1C3CAF6A37F7B68B4284855CD\"\r\nLast-Modified: Fri, 16 Jan 2026 16:45:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5412729922435457759\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hICo0cPK9qN/e2i0KEhVzQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"8480a8d1c3caf6a37f7b68b4284855cd","sha1":"3b34b2785d3184061c81cdc7b56fd30474b0d6b1","sha256":"46f74374f08962e2aed679583b2b8387712732062f9c25dd497b383f98e82f00","sha512":"2e695545772eae4a9a7b79c47d3f8c035038a79c24ebfdd0da1ffca3dabbf6527908862540d36209decbc1a87a52254431675809f1f769f10aa7e0f2a878fbd3","ssdeep":"","tlshash":"b9d0c2a462edec08c6008568016f3586200a60d663c553abb0b0782a320c6eb3d3017c","first_seen":"2026-02-25T17:49:39.093801Z","last_seen":"2026-02-25T18:35:56.315926Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2895,"timings":{"blocked":1833,"dns":0,"connect":0,"send":0,"wait":1062,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/cddc76df980647ee95d5e085a487c170.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/cddc76df980647ee95d5e085a487c170.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1008\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C3AB4B813237F6C41D\r\nAccept-Ranges: bytes\r\nETag: \"1D8873B15CE7E65A262D1788F19912EF\"\r\nLast-Modified: Fri, 07 Nov 2025 16:46:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10605487744494310156\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HYhzsVzn5lomLReI8ZkS7w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-05T03:35:57.691479Z","times_seen":353,"resource_available":false,"data":null}},"time_used":3196,"timings":{"blocked":2900,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/d5429c166fce4fd7870df2a1a2dd2eab.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/d5429c166fce4fd7870df2a1a2dd2eab.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1125\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C2C390C33335ACA420\r\nAccept-Ranges: bytes\r\nETag: \"75F196B437F9D87FDC198BC904C66C4C\"\r\nLast-Modified: Fri, 07 Nov 2025 14:43:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10138601249240458443\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dfGWtDf52H/cGYvJBMZsTA==\r\nx-oss-server-time: 25\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-06-05T15:12:51.674782Z","times_seen":1634,"resource_available":false,"data":null}},"time_used":2544,"timings":{"blocked":2246,"dns":0,"connect":0,"send":0,"wait":297,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/70267db8b41b43859fedeac1ebf734f5.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/70267db8b41b43859fedeac1ebf734f5.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2403\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C34C8B373835F3D87F\r\nAccept-Ranges: bytes\r\nETag: \"6ED88C45B665C3040F6355A0FA67CA8C\"\r\nLast-Modified: Sun, 25 Jan 2026 20:17:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6232551686171913327\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: btiMRbZlwwQPY1Wg+mfKjA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ed88c45b665c3040f6355a0fa67ca8c","sha1":"43ea61ee069f7a67027f6ff315c6c6b0e618c4e9","sha256":"55fdbdbf15f9415a55996ec176f50420f289cb629f7b65335960b47874056a97","sha512":"4cdc68655fcc62dd8ae3f1157a1cf577e0c319826330350827ae83f3664664bf990e363c94fc30642ed8628a17f84279776920e8d272b602b77ef539bf1af646","ssdeep":"","tlshash":"84416b730bc6fc1abd0784bb44683a1b433df994f27c1646ac1ba06e011260c3cabbc6","first_seen":"2025-06-07T20:38:42.097646Z","last_seen":"2026-04-28T19:21:23.20188Z","times_seen":38,"resource_available":false,"data":null}},"time_used":3270,"timings":{"blocked":2980,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=rs0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=rs0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zzdIRZ0RPXUDd47W0VE%2BDfNMqMoOumXCjtA%2BRsVxq6XnS2GfjwY8rZNZkjzH1mo5msCLRqe3%2F4UTiseY20MRCuFPp%2BWhBvku5CO9wrx2vQ18\"}]}\r\ncf-ray: 9d394c53cca00d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e6b353d4ec5e791b5a8c7d18ec7bdf6","sha1":"ba6b47e71473607946d5c7d563f5210496020061","sha256":"ffc9bdf9ecb8e2c2675d04755a13b9a9a6fb7ee9a368b5c82f9006d65590863c","sha512":"4182d4a8fe8901a15f05e31c52e45c6ea155092196fe1a4b4db3dd44dbed7317809876039e5a3e93f57ad2effbb89a298159e3b46f4706e0cdcc0212886e6df8","ssdeep":"","tlshash":"0e9002555c1c9342b8c300a5950a1204082431603664d2484c595126809c2b22044958","first_seen":"2026-02-25T18:35:05.730041Z","last_seen":"2026-02-25T18:35:05.730041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/kline","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2F2jVDobf1T9%2BLJkuOiB%2Fn2EUSUvMR6%2FkriU3a%2Ba7A%2FohtthVll1v7vn1RW3w%2FGM7XMy7o%2BE0M2D7upQuRXw0DN42sF0qZcvPYARDsEkj10B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c544cd80d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/e5c9542d189e43ffb0a554025a4ad7d0.jpeg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/e5c9542d189e43ffb0a554025a4ad7d0.jpeg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18506\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C24C8B373835C1D77F\r\nAccept-Ranges: bytes\r\nETag: \"E1053A6EE51F2F01AE88306CA133AD35\"\r\nLast-Modified: Sun, 09 Nov 2025 14:27:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7675376803137166977\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4QU6buUfLwGuiDBsoTOtNQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":18506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"e1053a6ee51f2f01ae88306ca133ad35","sha1":"0dfac94969c5daa0d6c64c4be3f10cf530471871","sha256":"bf0381609467fa88d195a0cf3cf3472351ecd1e79a39a2538926ac1cbc9b7865","sha512":"b99f7a27128c16c447a13e8fd6462912303ca3c5cd35ad52b8e9b826739fc688943a4d0390eae26f726160b8b61258d48f3fc0a1d15b7904efabe04bca2df8a5","ssdeep":"96:87SNkY9WmQMEqpTtNX7sc5Z5+dBVLDhoaacGrZ4jeYwzMx0:WSNkUJpUVDKaRGrZuebze0","tlshash":"b982e938fdf1b3a8595962363dd728085d770783e6c19c847ace8c1a1f11bae8c5f562","first_seen":"2026-01-20T10:42:16.634383Z","last_seen":"2026-02-25T18:35:56.366106Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2204,"timings":{"blocked":1902,"dns":0,"connect":0,"send":0,"wait":298,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/vendor-Cx-AeqoB.css","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /assets/vendor-Cx-AeqoB.css HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-1fbb8\"\r\nexpires: Thu, 26 Feb 2026 06:00:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2057\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZbHu3XfWZZrComO6BmPRVIFfTs4kV82t1DIecu5VIEjaNPXhcaXHWqncSNVU%2FYHkc1pGPoz%2BqbcKF1Q2f6sIyerap7aROZHUEE%3D\"}]}\r\ncf-ray: 9d394c447ef60d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129976,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"37ab837dac40c2fd264d51555bfb5025","sha1":"96107ed5c3932503bb130788a6982dcc4ac201d5","sha256":"4703012c966139c03992d2e83733a8f760751439d325877df779e394334f37c6","sha512":"6973a1d02b9fecb6ec34aa5c516b37987659b4ddb079804bd197a6c8ca5bb7f86a2830364aa88e09d853fbc2b4b5eed6b742fbe4eee220c3fd6309b22033670e","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8DMYyIG1Ah5aIzU:BnNIClDsIxuVS8g8ty","tlshash":"02c3d6a5e6c491bc6f2bf2649b8766d8f23cf661dd01daa4f105505c0fc7bf50223a2a","first_seen":"2026-02-25T17:49:39.08729Z","last_seen":"2026-02-25T18:35:49.299432Z","times_seen":9,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/index-DH-MRcqw.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /assets/index-DH-MRcqw.js HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-72030\"\r\nexpires: Thu, 26 Feb 2026 06:00:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2057\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FbNqv0ITQsVLkAJUb4Cii6XT%2F2O%2FKcDNKtWtHE4UbO0NoofGlzQWRWM9eTsTAHdjW9%2BQmerlcsBZpOadnJuzjhonQdmkx5uXVY%3D\"}]}\r\ncf-ray: 9d394c447ef50d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64497)","md5":"32a8543d9ad04ac0ac18213387124bef","sha1":"668a3e0131e7691435dcefa42db58d605ab39d70","sha256":"982a01f0ebd6e6e829f75adbb43e0a506deb422a35f7a1269e9d5af6d6e7c008","sha512":"caa82496b46de64127292abbbb87660a93d7b8179550144f99fa86d27cd23175f64cb730ce03f500479271164f99098f9fd85bb4d8262787e2c3dca8a82f443a","ssdeep":"6144:NCuWYrU6FYlCAHi6XiEjWYTkVcGmEym4mqn5nq4c:NCuWWtFYsCoVcGmEym4mqn5qB","tlshash":"6da4e681f85689bdebb75455544e2401328c3fcfd00888a6f6fe9d0a279adb8735eb34","first_seen":"2026-02-25T17:49:39.096677Z","last_seen":"2026-02-25T18:35:56.267486Z","times_seen":10,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getAllSetting","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:39.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:34:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCfT%2B1eNdb%2Fx9UtisH31%2FPV9tOYBpCM2U05vm6kjx12s%2FnFABNZT8Zrr%2BsRBF3zCcZhabynI7cJ8w7%2FjDy8Qqs5D%2BOP1UmVPx5hG93FwF6o7\"}]}\r\ncf-ray: 9d394c4e88c5bb02-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13135,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1f91bceb1e73df2ee49852f3c28789eb","sha1":"bbcb0f41a676739035c5e956073440ac047a3d08","sha256":"58337cf12962d03d487843cfdb8ae6eb1c64a14b29f181a7fdd9d381498ec15b","sha512":"4cb6d3ac0c2cef10e286dd5de1ec6fa5ee2f5478a9beb6c2aa3c81e8451886315f27e1c20b99dccd1cde1fb049926d56ec9e8020f0beb078d6af45e5f85b9d93","ssdeep":"192:c+9/HSOFgHQL9+oTzBYUMI+Rqcc2h7Ku70gwK9MSDvNL7nA73J1xeS5NfN12/NaQ:o2pZX2VTMjjzke16mi","tlshash":"bf42835a36dccc7c86e69eed90b73aea689c345be940ac06d5e76f5c959ccb20c0700d","first_seen":"2026-02-25T17:49:39.164864Z","last_seen":"2026-02-25T18:35:56.278841Z","times_seen":10,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=cf0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=cf0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAStnYwrS9GLJZJd%2FSG3%2Be6Wa1VhAT7GV%2BuQeUkBjo9zPpNIK7iOK0u%2BFcG35SrplyDQXvfk5%2BF14QoUIy1wTofacmUmsSOSXGHaEUA3U9kQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50ab7c0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=ap0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ap0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPkQHWBc8MtUyX8i1042m3QB28x%2FBXp4NsLfya9Z1r5F5Ke0x%2FKgIEb%2FvH6I41wBtyEKeAMrVyyV4xsr71lg3hRtvfu%2FJxVN4RiipAHm77ut\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb800d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=pm0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=pm0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjTvRYLW9ZTjppE8k2i7kvrUMSx3z1DmNom%2B2jBpXiKWLzWensPZhUn1f4GK7JVGwax4qkbgA7OJWVaqG2oPYl3H1d2ybPtefQrS5UeyOTdT\"}]}\r\ncf-ray: 9d394c539c8c0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1a346c3c7d365585b23ddffeee7d1092","sha1":"cbddc260145515290f076121d22b2dcd206809f6","sha256":"f038aa4d085ea5596cc0eea33bcf0573b61967d75008bbb5989a8fb3543bacbd","sha512":"71a7d8008a86dd789f1f878266be533211ce5176eb8c4903dc5e27da73b072852b0a0891dfc70a570658c000c769083605ef07b2f7bd266b8015a4d4fa10024e","ssdeep":"","tlshash":"e09002555c5c9242a8c300a9950a221800243160266492484c59912a91982a23048858","first_seen":"2026-02-25T18:35:05.73324Z","last_seen":"2026-02-25T18:35:05.73324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getCoinList","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:39.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:34:39 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vIR4STTLnkVQMZTeXs87n6cXrjKvfgQpe%2F7LffZpbIN4wgqGZ5yyc%2BtgWMaJUNVnPVkl9OPo26zmE8BueBxO4IaeyjbfPBHHY4FLcG9L5r7\"}]}\r\ncf-ray: 9d394c4ba9e1bb02-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":55,"dns":0,"connect":8,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=xap","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTJlHpSE8Dmvm%2FT2PdX%2BCCIPeNJJdkClylgT6PMLFNRSyqrRzCAkRHQIHnfZ9r7Ahie%2B7Cg%2FuNOI54xrDZHyht5%2BU6Wgy9XOlyTk91JcTdPe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c505b580d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=oi0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=oi0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2ByrWHTtl7H8cwPF%2F0jF6VtupVqa6MY3i%2BDa7avVeoQ%2Bq%2FoEfO%2F%2B83QwnvTCkyfDmKxPMDcWoX9c%2BDrKpfSpxf8GPSGI89MEvINdKXR6L3vVN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50cb9a0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QZ8tI0Ci%2BW0ThRH5R0y%2BwYj1W69hN3Mud8xMgQxzwaVOm3yrTaYUK%2BlcNVAGBYTXSHc7OrgMpb%2FyJKl%2BH22OVEqGZSnH1Fww%2Bj16wRIbawlz\"}]}\r\ncf-ray: 9d394c51abe40d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0c50645a81b52f724bbbb2ff5235ed3f","sha1":"2683eb6ef637b15ef55d39e6d5c63853c6ab0a8c","sha256":"aab3114e1bb4efaf59ffbea180c6b4ff616c3fd639c98b1371b3bce2b39808fc","sha512":"aaebab1e9b277fc57a535ff0aa124041c40c451407579c8a2827e8bff2359b6e58acbf381633a1e9b43bca968c94937e5c8e7406ec223746af8a95d0da2fa283","ssdeep":"","tlshash":"659002551c188242a88304a995561204102531652a3492485c59516586cc16a2040858","first_seen":"2026-02-25T18:35:05.734037Z","last_seen":"2026-02-25T18:35:05.734037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/f6fe74ef42554d729c4cd3eb0d166a17.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/f6fe74ef42554d729c4cd3eb0d166a17.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1543\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C34C8B373835A4D87F\r\nAccept-Ranges: bytes\r\nETag: \"41BECE343010E668120550D4AE2AA14B\"\r\nLast-Modified: Sun, 25 Jan 2026 20:21:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15789706783051950989\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Qb7ONDAQ5mgSBVDUriqhSw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1543,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"41bece343010e668120550d4ae2aa14b","sha1":"ac0d49f6c3bc440bff3cde62ff6344ca23038ccf","sha256":"eef747ec1f7d594f80003a21812a0d500da2c4bb6b9e141e59e94f566b55650d","sha512":"8190af78435fb561867cc63b820177842fca11a6f869b5e277e5720843c99dc0547c7e557af69d02f158237993af81a7f82783685e47f7572e67bde41645a207","ssdeep":"","tlshash":"41310a8261c2d878de59089b41308354bff5f94ba3b5817cfb718b3fe2940884679b07","first_seen":"2023-10-22T04:22:56Z","last_seen":"2026-05-02T12:51:02.114114Z","times_seen":105,"resource_available":false,"data":null}},"time_used":2988,"timings":{"blocked":2702,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmni","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmni HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OEqsnI%2FFmfoDt7oR8tG4r8OhXDB5qbll01Mw3Hs3F%2Bz9hwQGlgih3S42djN46qpsG%2FdxRLuYaO4Ny1lm6RQb%2FsXeG%2B9U6J38imGxXbW%2BCXm1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c509b720d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=rm0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=rm0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jNrja0k06sWV93d61KbinjV%2FF0e36vpwJTUGpUHHSL%2BJvqBMxeby904pTtyik%2F2xXvEe0F2fucpua4%2F8QWWnwTsQJwKgatCWiuuGDLYyIjm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb860d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ry8PMvEcfmTO9sea%2BmkgD%2FR7nTWhn3nL0OrER3SrQuyCK%2Fg1uSQ9w7Ab%2BlfAUD3X9h1tpR5ldYHCbkKy0FotJgimdN9X2WJ9tn%2Bu2y9wuBgZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c528c350d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/71bb1145379746bbb85d5d97b19d1365.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/71bb1145379746bbb85d5d97b19d1365.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 902\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C18B90443033A4A9F4\r\nAccept-Ranges: bytes\r\nETag: \"FC5B38F55A02A58D5160671AA2DA6EB9\"\r\nLast-Modified: Thu, 05 Feb 2026 01:56:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1190865812862352741\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /Fs49VoCpY1RYGcaotpuuQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":902,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (902), with no line terminators","md5":"fc5b38f55a02a58d5160671aa2da6eb9","sha1":"7c88c58a8d4d4f5ca21705f33daa303fd12b8498","sha256":"a107de36cd8aac17c3ebb213e8affcd36f489347618d62c267776c350b59a1d2","sha512":"aaa12bb59760f19dc2ddfde6ee6a3556b53219bb218320a3c060a0678ea770729fc5d780ad778321a166bc272ffd6070d214861b01faab5a0a2d56d3248668f4","ssdeep":"","tlshash":"3e1100e7d3d8944c9615cfd42e1125ed336a14eebc6081cbc3250e30a710e6dee40d39","first_seen":"2025-08-03T18:12:41.874125Z","last_seen":"2026-05-26T23:51:13.82641Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1596,"timings":{"blocked":717,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":586},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b46f94384ab645e587b0be4e0c59908a.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b46f94384ab645e587b0be4e0c59908a.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 999\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C2AB4B8132378DC31D\r\nAccept-Ranges: bytes\r\nETag: \"29C3D280A043856EF6AA3DF0BFA25850\"\r\nLast-Modified: Fri, 16 Jan 2026 16:52:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1987206561325582990\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KcPSgKBDhW72qj3wv6JYUA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":999,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (999), with no line terminators","md5":"29c3d280a043856ef6aa3df0bfa25850","sha1":"025b4885bd801e038861fc4a2c70ef7b52d4a4d9","sha256":"211df889f62b99c180f0cd4a41241353b0c505dbb4cfa1cdcae9572ce600bece","sha512":"f0d1892e6a63871d5ec537bfb422faa8bfd12617eb47a37f05e46e0df03bf6db03f6d2d59498566bfb1b69cd2e22940e67e09f5b392d29920bf31dd2401580a8","ssdeep":"","tlshash":"8111ef2ba3c8445c0483c9b5df706171230ef0bcf6c943e9598d45b0700b89be493526","first_seen":"2026-02-25T17:49:39.133375Z","last_seen":"2026-02-25T18:35:56.30218Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1846,"timings":{"blocked":1543,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=sr0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=sr0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5jIrJ%2FH5eTi1dFDysfBQi8LHkgXW9FZvrc7Y3vU8VwBu4GuIM1JVQqcpX8F3Yde6jJjr%2B%2BuF7k18vo4yRXBWfMtQVeod%2FnMqKfv11QIWnpg\"}]}\r\ncf-ray: 9d394c53ac910d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"09c9cc6ae00c1695373c50ddf44980ad","sha1":"e040ef469518a9d92815b08d7e66083b11961e5f","sha256":"e26fd7431776629685ee167c080cb6e327c82751944ed689f692e8681cc183e6","sha512":"6d710eea249ff099f911defe8509a0bb62d0de714d2b715d310ffe12de665fe37b34eac3bde185e4a3a820f52d2b48131a6c40dec899419e8650f2c0020cae53","ssdeep":"","tlshash":"3b9002595c1c9742a88340a5950a1204003435603624934d4c595225c1881a22044c98","first_seen":"2025-05-13T09:59:59.578657Z","last_seen":"2026-02-25T18:35:05.736985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=sm0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=sm0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O8jIYqjVQwphyzX7si1UI8kSpanOTsExm9rqfFOMxdQqL6FJstwRQfmNDASdNRmKoWIUwyasw7QsqvEV8l1upeXT4OJbdtv5xau1Kf3HUmR\"}]}\r\ncf-ray: 9d394c53bc950d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"83ac3902704a23a7dbae2671f5e4b422","sha1":"e8493048b93f91e380dd04aef8dd87f7e1b087aa","sha256":"66569bd81c804769cafe41354cd743705b8197bea964b22b2d445d97cc4b3e0e","sha512":"26dd80f3e68e753bdb1c2dd3acd06c4d606d61b8cd6084133a19359d7e63311dde4d8755b8cfd0839055ea80ee0e20c11782269206c55a9534e11970da064296","ssdeep":"","tlshash":"7b9002555e1c8243a9c300a5950a120800243160266592584c59522680882a2204485c","first_seen":"2026-02-25T18:35:05.738005Z","last_seen":"2026-02-25T18:35:05.738005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T18:34:37.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:34:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Feb 2026 05:50:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYTMH5UYdgTP057cW3PZUF3KEhl0SGn4WZJkpIHfS2VhE2iNL7sdqVK2zriT7cxOrXd%2BmIAVX3RE62ZMPKEXgdubCv2VDBYussI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d394c3fdb9c79a6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7673,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1140)","md5":"c566177b7f8e48f693fc9d39b40ae258","sha1":"28b330e88b08a60768e94f55e0061f0f09e7aebe","sha256":"9ded372350df37bbde615eee2def777356a664b7375421ce05b4cd268cc5b885","sha512":"c3b0177ab4a7f12e11bdb6df8ffbf8d6d7669082f66ed47051aabe335d34635f3124e72654bde48f140c000f1c89d76d338d98bdec90873cc602a89956186c01","ssdeep":"192:TFMXUMUqRGqWK1GOiUm9Al6BIxKOZCxf62nftZb9LuB1Xi0iEffl:KsU0pexRZCxC2uSjE3l","tlshash":"58f175a72db1d90d2353822a9bebb0045a719193861ecc64b9dc55ed8fc1fd9c8c37b0","first_seen":"2026-02-25T17:49:39.095621Z","last_seen":"2026-02-25T18:35:56.288716Z","times_seen":10,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":46,"dns":13,"connect":8,"send":0,"wait":509,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/index-Cxo-H7QZ.css","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /assets/index-Cxo-H7QZ.css HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-8cdeb\"\r\nexpires: Thu, 26 Feb 2026 06:00:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2057\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5xK6GGi1VP28LZlf7rLWZOg4eAt6Bjp9f6HUPq3yU9kGaj%2BiAwHWZ78qhzCC15dwl%2BXMouMs7RwvPqrY8sobjXNE7ptJEAU4qE%3D\"}]}\r\ncf-ray: 9d394c448ef80d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577003,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"9297964b7fbcb3926b701b3cca1d27e8","sha1":"3da852cdb10b1d6ab496fd3d91b99f7062758b97","sha256":"86817309b1988b0cc46246e0a35bb22e4a48dbab53e4a5522f699cfdd8508093","sha512":"c984b1f2a79d545d85904cb124e6f171240926b50368127d53790b9c53ffc2526be2d0fa05870d421929c7ea957db1035924840d1710052dd92a9e7a46246bbe","ssdeep":"12288:+v1s9dZ8w71ZACkFDS3vyf58rBeV05TOeJz3sT2otK+/YL1V:+v1s9dZ8w71ZACkFDS3vyf58rBeV05Tr","tlshash":"a6c4e869b194113d6e37d5a96bc89acce12cfe62cc025ee4f243151a0ec7bf7236161b","first_seen":"2026-02-25T17:49:39.164042Z","last_seen":"2026-02-25T18:35:56.35422Z","times_seen":10,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rangwodf.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:00:44 GMT","end":"Fri, 24 Apr 2026 10:59:07 GMT"},"fingerprint":{"sha1":"A7:D7:98:60:01:FB:A2:7D:68:92:7C:66:27:0F:6E:9F:EF:58:EE:0D","sha256":"30:5B:B5:CD:C6:1D:DC:50:AB:B2:5C:F7:80:BB:2E:B0:F2:8C:5D:36:95:24:63:FC:BF:96:EE:7B:E0:58:33:CC"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: hw.rangwodf.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Jan 2026 15:40:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7UnsXaQrQbS%2F5oVTQPuUwNcF8vGjVCOyLtBwQbcxJ4aRVfvd7I%2FPGmP7FHxwSm8O9qoEHyN8%2Bfyxl2lE7G6pnGygni9KBNSDvNtvHcu\"}]}\r\nage: 2853\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"695bdb5c-110e\"\r\ncontent-encoding: br\r\ncf-ray: 9d394c44c9e4f3bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":27,"dns":1,"connect":8,"send":0,"wait":17,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=ta0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ta0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fpkx0m9M06QpFfxUrmwfH11GUCHeyI8RH9F6cKcwCAzY6hIXbEe9CMqc2C7g6DNj%2BwLnNodZQFEQzpYarj%2Fk138%2FlHyC2me5rHbPzEc6TCKS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb880d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/a8091092a71d43279abdda0624930f5a.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/a8091092a71d43279abdda0624930f5a.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 480\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C1C390C333352EA320\r\nAccept-Ranges: bytes\r\nETag: \"E7BFCC03CA74DD729B6B1583C443C4DC\"\r\nLast-Modified: Fri, 16 Jan 2026 16:43:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15456837065409324319\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 57/MA8p03XKbaxWDxEPE3A==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (480), with no line terminators","md5":"e7bfcc03ca74dd729b6b1583c443c4dc","sha1":"2290d24588653e8f85c00aeac749e5ddb6692c65","sha256":"3ef166265dd930a0d7d42ee5cf3f18c6fd981b608e148961f2dd39a9d3af735c","sha512":"9c5f8691fc6a203f453b07c20adac1861807f0ee5ad9563b3ef254d496bf08b3358924b06e95b4d3d0fba5b9c896bbbf5b50c7cdfdcccc89418b34b120215947","ssdeep":"","tlshash":"93f0a7a4371c18fc8b4ec2541ef77a5102b5f048b5b515f4e1ace09c3607657dca1a54","first_seen":"2025-08-03T18:12:41.87171Z","last_seen":"2026-02-25T18:35:56.279678Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1275,"timings":{"blocked":1004,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/81ea8efc053c447b897e347056969ef5.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/81ea8efc053c447b897e347056969ef5.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 385\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C28B9044303359ABF4\r\nAccept-Ranges: bytes\r\nETag: \"3481D50A0CB83C3DF3FB8FB9C47B3373\"\r\nLast-Modified: Fri, 16 Jan 2026 16:36:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11695750882785809015\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: NIHVCgy4PD3z+4+5xHszcw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (385), with no line terminators","md5":"3481d50a0cb83c3df3fb8fb9c47b3373","sha1":"82bd3ba93916c538bcf0e9c5f0a105ba08888fbb","sha256":"9169d94b99a06089f09ba0c50d08fe76ab38fd743db5da82a20431b847e97b79","sha512":"f1dd771436b054a5d92f5e9bfb99d13359f311e10d1288345c840445e6d23080a56021053ad9921cbbbe9d9e551db2657c074472d9ffd062863b8dbdb82c7a17","ssdeep":"","tlshash":"91e06888b54c8858880c46145b9f1191c03db29b8e200fdfb24a48287bf11db385963a","first_seen":"2026-02-25T17:49:39.122397Z","last_seen":"2026-02-25T18:35:56.296163Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2219,"timings":{"blocked":1926,"dns":0,"connect":0,"send":0,"wait":292,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=ur0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ur0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prY%2ByiX%2BE6uksEo%2BRodbDcuNo0QLogaALOJD7yzVsGbGdZb8k1DbVVR8eqBAfH95mMdHHsa%2FuUcUNSw90iPPqzfrDM4n52cAFHgSEu1og3kG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50cb910d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/9c73b0a5e0f5482ba93ff82a64753593.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/9c73b0a5e0f5482ba93ff82a64753593.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 254\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C14C8B373835C8D67F\r\nAccept-Ranges: bytes\r\nETag: \"FF658B4688DFB0BD799F8B6D44E8BAA5\"\r\nLast-Modified: Fri, 16 Jan 2026 16:50:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17519022467822145737\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /2WLRojfsL15n4ttROi6pQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"ff658b4688dfb0bd799f8b6d44e8baa5","sha1":"6dce350b82ec29656b48a1e3c917a5ab075a40ec","sha256":"f15d37cadc7788f1f5f23bfe767f71eea619e84e989f5a93deae90bd0d13e3f7","sha512":"6728bb6033832ebeb0fb0c7e43f849f731aa3686bb5d5d3b5eec3496a4ba270aeb0991013abb06ba6c71d62780575a33fd70515fbc85778eb4bcbc337cdce2f1","ssdeep":"","tlshash":"f9d02b98e73965085501936077a4b0a591de108152580de9f08092243b0a5ea5c6059e","first_seen":"2026-02-25T17:49:39.092857Z","last_seen":"2026-02-25T18:35:56.361697Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2045,"timings":{"blocked":869,"dns":0,"connect":311,"send":0,"wait":287,"receive":0,"ssl":573},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=xpd","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvkmiM2QPfbIZpiEo52YZnri0ho9EYJPOVDNYFxtzIE%2Bg%2FZ7pZEYiGHS0phQV1INZljuSu2dQ%2BVW4R8jcAChhHdHY7eoQ%2FP7GAqkg74oJNPB\"}]}\r\ncf-ray: 9d394c538c870d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4724172553802eb1c786140da0aa14a0","sha1":"9fe5e1992289e567648d8cf758d985d8612c6990","sha256":"a1eb555da0aeaba636bcc05a7d47b05451625c17c35f2f73e1413d255702a20c","sha512":"08ae9735d4b54cdc6f09aa1b4cd50642537ac8916872dec443fdba1bdd516f78d0577c727252be6c97704ed6f6502821d7498f17a23298b056c77b5cfe124c3d","ssdeep":"","tlshash":"5c9002551c1c8242a88322a5950a220400683160663496484c699225c0881622040898","first_seen":"2026-02-25T18:35:05.742095Z","last_seen":"2026-02-25T18:35:05.742095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/cd3a6ad540744997901837d7b5ce2df7.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/cd3a6ad540744997901837d7b5ce2df7.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1218\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C38B90443033A8ACF4\r\nAccept-Ranges: bytes\r\nETag: \"D34183DB66626408066857B67F7900D4\"\r\nLast-Modified: Sun, 25 Jan 2026 20:19:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5782617094063956613\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 00GD22ZiZAgGaFe2f3kA1A==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d34183db66626408066857b67f7900d4","sha1":"83c65e97df3ff99ddc360cbb4f00e0aab9b46157","sha256":"c62e4c60cffc895ab8c244858fe3e536c8951cdfe3424e5af1cd6d92dd796c8b","sha512":"7ee53dd7c95dd200c67ef1a94d0a658cc28e6681bb7e9b80f25eda71cd907a57f11cba0074b512f7c554ac84364439cba30d0b0706b1d2e0b0d102fe045b5d05","ssdeep":"","tlshash":"6421e7a0a34da662fa3b2945e79700f0712a5431a90659974af74124c21c9462ac057a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-05T03:35:57.684123Z","times_seen":263,"resource_available":false,"data":null}},"time_used":3263,"timings":{"blocked":2970,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/c62a2440a5ae40aebf1e5d0e4a0193f3.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/c62a2440a5ae40aebf1e5d0e4a0193f3.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 905\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C16AFD3636324741D8\r\nAccept-Ranges: bytes\r\nETag: \"3CE67B0DFE0D4913E6A4B8BB76996BF8\"\r\nLast-Modified: Thu, 05 Feb 2026 01:57:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7395246166708416432\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: POZ7Df4NSRPmpLi7dplr+A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (905), with no line terminators","md5":"3ce67b0dfe0d4913e6a4b8bb76996bf8","sha1":"672efc93a23e7b38cbac90291c547584cfbaf118","sha256":"d3188bc91dd4dde40afbbf746908470c61a13c9482142ba82a4137a1d4768d17","sha512":"819c59160d9433695426559747902c526887de37c6e187115887b56c5909a4951fed0d68923ad2224d64442aa9897a94824a4c6245b466602faa1655b8ab5594","ssdeep":"","tlshash":"81119cebe3c8549885058f849c1228de275e54ed7da0c2cee3794e34e315a6def00d39","first_seen":"2024-12-14T19:28:33.186102Z","last_seen":"2026-02-25T18:35:56.315106Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":594},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/1f1bc3370bcb43829d02d2afd2397758.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/1f1bc3370bcb43829d02d2afd2397758.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 480\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C18B904430332DAAF4\r\nAccept-Ranges: bytes\r\nETag: \"0EF8F167397F98160A27C02225A39ACA\"\r\nLast-Modified: Fri, 16 Jan 2026 19:04:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16571003241623756943\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DvjxZzl/mBYKJ8AiJaOayg==\r\nx-oss-server-time: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (480), with no line terminators","md5":"0ef8f167397f98160a27c02225a39aca","sha1":"6676490ace72849336abde6ee90e9c18c7da9454","sha256":"efc09c3085141447fd2c4d62970a0461ddd798c086a34c9fcbc41f4a7dd33c22","sha512":"8534d2d64a2e42a9fc06f689270062a26ad4811c9f4d8ca9ecc49f620088720dedb8f9e3992dd37d17124e1b2b5ae93a4fa3d39af145a562b926cb3f3ba721a9","ssdeep":"","tlshash":"84f0a7a4371c18fc8b0ec2541ef77a5502b5f048b5b515f4e16ce09c3506657dc92e54","first_seen":"2025-08-03T18:12:41.8321Z","last_seen":"2026-02-25T18:35:56.310462Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":1088,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b65bcfa557804c9e917bbaca2be5a4e9.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b65bcfa557804c9e917bbaca2be5a4e9.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9071\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C3EE24003635B7594F\r\nAccept-Ranges: bytes\r\nETag: \"8E58A9F8123CA37A3107CC590D8913AB\"\r\nLast-Modified: Fri, 07 Nov 2025 14:47:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11388344900872455634\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jlip+BI8o3oxB8xZDYkTqw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"8e58a9f8123ca37a3107cc590d8913ab","sha1":"0ef0062b46e2e8df6df2e5aed52bead1158508d5","sha256":"01a100a2bf7ed08f9b3415c37997440e2203a2adacde6daaeca46356ae1a72b8","sha512":"c998ba87bc80953ea916be47d5a260befad7522871fe72147540125cfd337c35b55130513e7d1ed84b0c566a84514c02c0e204ff7fda9fcca929d9636c5ab4e0","ssdeep":"192:NPEg2TyU3dXD9CP/iLevd2RZz6lFJ2S8QO8KVEtXQSSJ:5EgpO9W/1FwY2SIqNg","tlshash":"4e12bf546f389eec83daf28a57c9621683b5264d722b681d739816308c924995a3cff3","first_seen":"2026-02-25T17:49:39.109706Z","last_seen":"2026-02-25T18:35:56.348635Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3044,"timings":{"blocked":2764,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lr0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lr0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vx1juhace1%2F2go%2FdogRknWPYv7eK9g8FmT57vQa%2F5mXKt7zXEYlHYL1QKEcnH%2F3ufuI%2BLM%2F%2B1ViFwbMm9bI34EoLwtwASbYDxghKITJh4MXp\"}]}\r\ncf-ray: 9d394c53ecaa0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f881a41a7c2a85187d14cfc97edbfacc","sha1":"48c02089555c0a62ce4e1e9c5b8775ebcb53d4f5","sha256":"944dc3d5b126a6b792de474fb0ff5ce9d8aa7b26709ec0147e478d74f8dbbd47","sha512":"2af3e77c8e72eb14e1463e119de10922218ffbc6d2fe17343ac4cc782548f0275c5f2389da687e3a2ba48ec99987076cd91bdfc20ffa53a65378ec8972312a24","ssdeep":"","tlshash":"f89002555c1c9242a8c300a5950e1204042531606aa492484c59592580881b22044958","first_seen":"2026-02-25T18:35:05.744997Z","last_seen":"2026-02-25T18:35:05.744997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=cy0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=cy0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPhKWTAJ8sPxwD79RR17v9QSFMAH%2Fw9qFQ3tKCghb1jcogHA%2BlK5GAcjPQ3ccGl96i2lVK7nHLIObhRvIKLm4yY3asfgFsGbili%2BZSu2%2B5tt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb8a0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6097f11c7d1e45bfb4c44fa0d25d8479.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6097f11c7d1e45bfb4c44fa0d25d8479.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1315\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C36AFD3636328543D8\r\nAccept-Ranges: bytes\r\nETag: \"79CBCBDFCC32E9ED14054FB9F306D76B\"\r\nLast-Modified: Fri, 07 Nov 2025 14:47:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11892337470558382493\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ecvL38wy6e0UBU+58wbXaw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-06-06T23:47:44.189054Z","times_seen":1032,"resource_available":false,"data":null}},"time_used":2965,"timings":{"blocked":2663,"dns":0,"connect":0,"send":0,"wait":299,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/vendor-WhAG4v2i.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /assets/vendor-WhAG4v2i.js HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-2240f9\"\r\nexpires: Thu, 26 Feb 2026 06:00:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2056\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UqPzCSd5AqzgyYZrqtgBKxi9AYslKuwyjJLQL%2BIaaa1yBObE3DMLGwgAKlOdsQ7qSepR1UPtoFoCxkySEfISDXIWiUyPmn4KDUo%3D\"}]}\r\ncf-ray: 9d394c4938700d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2244857,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da666d6567625f9c446abf8c73f7fbb1","sha1":"ef6cf5e3356cc9a638933e87a82a1f62368d6d79","sha256":"120135d1ab1e4bda172dde9a8d4f54f1170a0fd9bb43ff2a3ce7e2ee9d52a37d","sha512":"cdff01b4c9540f74bca443c14480ae63d02a0f1ba45ba85e3361c37634803c8a0b3c5b9132eed65994b99b762ebddaad411dff92c244eea429248684c44ccdc4","ssdeep":"24576:7ZuHc9Rl8igFrFnPzpSxyxJER+6xlduesz3e6:7ZuHc9Rl83FrFnPXxJER+6jduesz3e6","tlshash":"282509d8b651b02143a725e5007f050bf33a5909b44f85e8f669e8da7cbd84e627bf38","first_seen":"2026-02-25T17:49:39.106734Z","last_seen":"2026-02-25T18:35:56.275448Z","times_seen":10,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.lmefxc.com/ws/c18d3f66-44fc-4c96-bbb2-57e00657cec3","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:39.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /ws/c18d3f66-44fc-4c96-bbb2-57e00657cec3 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://lmefxc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: c2mN7qEym9b+/kSJU2vMOg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Wed, 25 Feb 2026 18:34:39 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://lmefxc.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: t4vR2G68pVCYinTETjQpC9mJCzs=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8wSj%2B7RF28N8HQmiBZ0nYftdXab2kiR1KdoXicMX%2BUmrtqo2mfbG%2FIZI9ClFJiI0jdApCcRvzzSGBGaAo82V2PsH8ioxpagL2hqVMHvVoiFOneRmk6pdF%2FOdiP179h2TyB0lDw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d394c4a9e4cc1a5-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=8003\u0026min_rtt=7939\u0026rtt_var=1722\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3108\u0026recv_bytes=1192\u0026delivery_rate=543679\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=848c99e2accb3643\u0026ts=508\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":0,"dns":51,"connect":58,"send":0,"wait":485,"receive":1,"ssl":85},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmci","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmci HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arqM713aHrCr3Z5phReeMfDJP1v6W6VKzPQLf07LzqxBqmzNNyd1orHVEP9eSaGTsW3endpKXL1lzsiSO8pFwduUjBUbAd9n1E4MDbi5XYH1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50ab760d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=fg0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=fg0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifwnc9F3tCJK56z9NI6qMW1kHJf%2F8hzfmZJ%2BSS4zraN3CgMy3RB9FQ5GucUnxuDFKjk%2BwigVdErQzSggkhu6QPIeuTSNvAlEMbhpgxVZyOL%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb850d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/8d1b90234fb4449db9889abc32336a8e.jpeg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/8d1b90234fb4449db9889abc32336a8e.jpeg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17675\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C26AFD3636324642D8\r\nAccept-Ranges: bytes\r\nETag: \"2548E25D4F4FEF47E29A5A49C1644D90\"\r\nLast-Modified: Sun, 09 Nov 2025 14:26:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10665380921239879580\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: JUjiXU9P70fimlpJwWRNkA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"2548e25d4f4fef47e29a5a49c1644d90","sha1":"ab9f70665bb9222976a25f5f5588018bd9d0c9c0","sha256":"b907bda3ad94bd2675cd552aafdd16a248e803e7166d12ebfae3f0a679718344","sha512":"25d3f5a27096c9b367553000c3c16693762460e59f5c9b61200ca3d836a9fa6f9d7cdd74c920e9a23c24c47ce8fb509a9750143000fcf10e688c52c6f2c76b97","ssdeep":"96:87SNkY9WmsTRyp8FNX7sc5ZI2kOrSayXy:WSNkUeY2kRaQy","tlshash":"91824138fdf1b6b85949a2323dd224095d7307c3d681ac84b5ce4c1d6f21bae8c9fa56","first_seen":"2026-01-20T10:42:16.631699Z","last_seen":"2026-02-25T18:35:56.33099Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2126,"timings":{"blocked":1816,"dns":0,"connect":0,"send":0,"wait":309,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/37d0708d7a95435085253a35dc8144cc.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/37d0708d7a95435085253a35dc8144cc.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 378\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C16AFD363632E141D8\r\nAccept-Ranges: bytes\r\nETag: \"AAAF9CF5B8BC3D6B55A9380129835F2A\"\r\nLast-Modified: Fri, 16 Jan 2026 16:47:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4564059271997170715\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: qq+c9bi8PWtVqTgBKYNfKg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (378), with no line terminators","md5":"aaaf9cf5b8bc3d6b55a9380129835f2a","sha1":"c7e3e898dec6b03b62751e0e2f5dddabbab22c47","sha256":"f2bc508c36914576cd48101f78146f3b5e37c0ca1eeadbe0c314bcea301d9bda","sha512":"512bcddc45378ea94b76d58b013ab0013145712228c5b1faf62c2110257ec3de94ad3b40012408f7c23903aacb9801e63441d26fd87663410e9aee6f9dd1c6d0","ssdeep":"","tlshash":"efe0c0ddbb2c67cce00177403f58b062004b30a7b16d08d5e3c4603e32c22a6ac0edb8","first_seen":"2025-11-12T03:40:09.402461Z","last_seen":"2026-02-25T18:35:56.351186Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1597,"timings":{"blocked":1299,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/44f263b10302403fb00fb62c9c592316.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/44f263b10302403fb00fb62c9c592316.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 286\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C2C390C333355FA420\r\nAccept-Ranges: bytes\r\nETag: \"6C902374540EAE7254E4E90D931E564B\"\r\nLast-Modified: Fri, 16 Jan 2026 16:40:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13457823232266648472\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bJAjdFQOrnJU5OkNkx5WSw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":286,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"6c902374540eae7254e4e90d931e564b","sha1":"b4de4918c72c67df321a40c9bfe833ba9b94259c","sha256":"56262e613b0cd1087c797afdc383f4b97878ebaa3f70a61a414dda4c7d4fa857","sha512":"925a79e6a31321d203465ad2dff6e1d9693fa2b97788c7b975cee2a042fa71ec32cc1b454efb469fd5858375c7ce55cd85a8b7ecc712091c185589543c081b8e","ssdeep":"","tlshash":"58d0c2fea3cc38bd9102c3a019542341071ff0bd736001aebc8d91747203186dc139e4","first_seen":"2026-02-25T17:49:39.114794Z","last_seen":"2026-02-25T18:35:56.270125Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2308,"timings":{"blocked":2036,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/resource/fonts/Arial.ttf","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lmefxc.com/assets/index-Cxo-H7QZ.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\netag: \"698755ca-ff9e4\"\r\naccept-ranges: bytes\r\nage: 2056\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcL5MK21s3PK7baXR9Tr93uVd0HbJnUWVUpmw5tYvgp%2FlNhixhirTda1QeLpha3jegOWh7SsrIOuENmyRXX8x5r6Yq%2BqWhaJJXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c45af7f0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-06T23:47:44.198419Z","times_seen":1328,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/0bbc1f210efd44b7b0f397f5c9019109.jpeg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/0bbc1f210efd44b7b0f397f5c9019109.jpeg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17205\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C2C390C333351CA420\r\nAccept-Ranges: bytes\r\nETag: \"9D772ADE3BC2B9287C5D763D0DC39203\"\r\nLast-Modified: Sun, 09 Nov 2025 14:28:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14248787782445785380\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nXcq3jvCuSh8XXY9DcOSAw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17205,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"9d772ade3bc2b9287c5d763d0dc39203","sha1":"1a3aaf08db74b76ddd093d9a6b504dbe53f8c3af","sha256":"91f92352178ea0f9280ce196bcbfb57427e44781d5edd1e554ef82995b44de32","sha512":"abecc403c5cbce3fb7cb27a55e4ebc20a4b6342b932abf96ddfcd1370d3d595122fc88aa60d41cfd997f90b5b2eaef40ba0d136b68dd5232ce17a16f8d65d3f8","ssdeep":"48:87/6bM+kYn9WJsEvJ72/caBC/aaLkJXzLZU9+H6+L06hlp6RX+N+Y97sc5oI7SSg:87SNkY9WmIi0pyNX7sc5ZSSD1fM1","tlshash":"05727424fdf172b85909a2323dc628055c7307c3ea81ac88b6ce4c1a6f5179ecc5f666","first_seen":"2026-01-20T10:42:16.642857Z","last_seen":"2026-02-25T18:35:56.335299Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2289,"timings":{"blocked":2006,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/94ed580f27b544498ab96c384e423989.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/94ed580f27b544498ab96c384e423989.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1018\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C1C390C3333573A320\r\nAccept-Ranges: bytes\r\nETag: \"A4B6A089F3322BB068FECD1905943929\"\r\nLast-Modified: Fri, 16 Jan 2026 16:45:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9473436175029793703\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pLagifMyK7Bo/s0ZBZQ5KQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1018), with no line terminators","md5":"a4b6a089f3322bb068fecd1905943929","sha1":"6cc2cc2e295485ee9bad6e522ccdd40cda885d94","sha256":"fa94988572861a77fee47c6e48974079596e86f2af7d14241c79a1b63363a6cd","sha512":"236875f341e277a87dd7e629bd52b6961996b2c6342ba0f11ffe581af53a833e8554375d2a5b4e5892c86259ec935f3a06cc07305cddc75ced65e6c12465896e","ssdeep":"","tlshash":"e511ab395648814c1843dd68ee3994a1a31fa4fe7bd843d0fe9dc2f1b08b5c8da07949","first_seen":"2026-02-25T17:49:39.102113Z","last_seen":"2026-02-25T18:35:56.362981Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1534,"timings":{"blocked":1261,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/1831377bc0e04eec9432cc4b954c3596.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/1831377bc0e04eec9432cc4b954c3596.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 480\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C1AB4B81323708C31D\r\nAccept-Ranges: bytes\r\nETag: \"AD8ADE7DD755E59EF5FAD615893CA841\"\r\nLast-Modified: Fri, 16 Jan 2026 16:42:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13652504368633705886\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: rYrefddV5Z71+tYViTyoQQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (480), with no line terminators","md5":"ad8ade7dd755e59ef5fad615893ca841","sha1":"76e37b9092b56a12440f1859a715ddc4634cdf5d","sha256":"4e66e04e0af0259b6bf18a028ce57b6727517b428f3b1d81c173bfe61fd09033","sha512":"29ddf0b5ceeeb2a5004a0f143cf40655e9dd506e11d81f83c121aad18edd47ad65935a8b7dbb15d46f65f3c773620d5b8b023ec894ad40315bf8fa5f3c9e6fe7","ssdeep":"","tlshash":"ecf0a7a4371c18fc8b0ec2541ef77b5102b5b099b5b516f4e16ce09c3506657dc91a54","first_seen":"2025-08-03T18:12:41.856937Z","last_seen":"2026-02-25T18:35:56.276342Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":1001,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/f22f1f1f551343429c9e1f1df91fe846.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/f22f1f1f551343429c9e1f1df91fe846.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 646\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C28B90443033ACABF4\r\nAccept-Ranges: bytes\r\nETag: \"F4FD162F795BA4C4D26CB64B4FBB6DBF\"\r\nLast-Modified: Fri, 16 Jan 2026 16:48:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14951756217423420894\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 9P0WL3lbpMTSbLZLT7ttvw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (646), with no line terminators","md5":"f4fd162f795ba4c4d26cb64b4fbb6dbf","sha1":"e2a68eb2ae420362e1c95350b368efbb25dd99d1","sha256":"48ddcfcca88ada05896c8535ad39d3bdfcb7aaa511900d09dc84eb6fbf2689f2","sha512":"f531989f5ea69f0647557eab2d59bc9a31b897de5f4f792a4550fcbf922ef65140b2cbd21892ea54c47a5ac936f06f490b3c935739277bc3ad66d4f0984a0bd0","ssdeep":"","tlshash":"ecf02de7ea2cac3dd15ec2acbe248196b46b30a7e2a187a4d2dc5f1d3004aca1800640","first_seen":"2026-02-25T17:49:39.116269Z","last_seen":"2026-02-25T18:35:56.309513Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2475,"timings":{"blocked":2183,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6ca34087a8034918ae896e85e9b8ba0b.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6ca34087a8034918ae896e85e9b8ba0b.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 957\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C38B90443033FEABF4\r\nAccept-Ranges: bytes\r\nETag: \"DB1F13E46508474023E51DAC9B924272\"\r\nLast-Modified: Fri, 07 Nov 2025 14:45:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2775687442448118922\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2x8T5GUIR0Aj5R2sm5JCcg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-06T23:47:44.179662Z","times_seen":510,"resource_available":false,"data":null}},"time_used":2719,"timings":{"blocked":2427,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/resource/fonts/NotoSans-VariableFont.ttf","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /resource/fonts/NotoSans-VariableFont.ttf HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lmefxc.com/assets/index-Cxo-H7QZ.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2044548\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\netag: \"698755ca-1f3284\"\r\naccept-ranges: bytes\r\nage: 2054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FuxNqN09JWJsXFMbf66gvqjlyu%2BB0Tm%2FBiBtxxR1zTQwpqhCYzZsZvK6XqQcTh3wPMps7s2LBjxfDuZQfwtOEBMcRY2QsYgdqs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c521c0d0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2044548,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 21 tables, 1st \"GDEF\", 46 names, Microsoft, language 0x409","md5":"2d50833a7080687818ec8356f2f835e6","sha1":"bcc7ff2a479b307c670d202dd7c036e3d78dbb93","sha256":"c16c1e57f7535b280220b6a8946763cc2586b0f9bcbd2c1bb90fda30d59a425a","sha512":"2221b1468d5dc439db90259789a183de65e74c4d02b5ce39647012af0387c35531880c45f4772b0d7680358be82d3ffdeabfbb75d84d3b69a1fb55432f5de428","ssdeep":"24576:GH7nxLLR1vk6doevguv7Q1d4fOU2FC4gAAS:GH7nN3BQ74fOUaC4gAAS","tlshash":"9a259f03e78ade89f1022f7442b343622279afe46f97474b97416937f89b3c42e515ca","first_seen":"2025-07-29T21:17:30.489341Z","last_seen":"2026-06-06T18:45:01.739031Z","times_seen":448,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":396,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/be2e130da7ba47048b1eec7e38ca9d76.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/be2e130da7ba47048b1eec7e38ca9d76.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1059\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C24C8B373835F5D77F\r\nAccept-Ranges: bytes\r\nETag: \"4A705FFAD5462ED7B943B410ACE32A08\"\r\nLast-Modified: Fri, 16 Jan 2026 17:07:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 894769418603664855\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SnBf+tVGLte5Q7QQrOMqCA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1059), with no line terminators","md5":"4a705ffad5462ed7b943b410ace32a08","sha1":"5464d4e8a59c1afffd0bf18af7d6e45ddacd1396","sha256":"d2d53dc25637d773ba8438a496fa5652345885026f648ed8daf684d03e12c835","sha512":"6738fa64ac41961189558410d8b2c888883eb77483371ac39ed0c1812e1ca8b4471661859db25b818cff60d21cbc08211ef4ba6adfcf3f40de1b754e964b4e7d","ssdeep":"","tlshash":"d811afa51b4d96aca043d35cdb32e0b4331f50bbb79d83b0598e8bf07443141d893920","first_seen":"2026-02-25T17:49:39.084761Z","last_seen":"2026-02-25T18:35:56.289616Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2235,"timings":{"blocked":1947,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=cj0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=cj0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVX5KqY%2B1B0JpZpnhq1oyNx%2F%2B33en4%2B%2Fuuj3Trxt66OgPqHlqatEWwbq0u5t4t1EAEbxPZkiLYxvWTncQ1zW2yCFGtPvCPaO%2F5apB6Wq%2FqJA\"}]}\r\ncf-ray: 9d394c53dca10d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"36f6ee762b558a1c841c1130fd5dda2e","sha1":"abf81f284cf3032e3bade3aef38077dfa57e4231","sha256":"8dff0a46c491d5e43f336dc304fb49e5655b36a3126f7dd2d9b9f41775e70634","sha512":"debff30740aaa499fd3636532ff4edf4ff476ec25e6c8bbdd285e722c91d7bd2459e851eca1cd6da8aee7b8d5cf0290f7f9c6d341c1abf67d45b3c9d37b705d2","ssdeep":"","tlshash":"319002565c1c8242fcd311e5950a1204002435652664924c4c59912580881a22044858","first_seen":"2026-02-25T18:35:05.755151Z","last_seen":"2026-02-25T18:35:05.755151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/assets/vendor-WhAG4v2i.js","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /assets/vendor-WhAG4v2i.js HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-2240f9\"\r\nexpires: Thu, 26 Feb 2026 06:00:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2056\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHDdZkP6%2FfbP4jl%2B2L2paIAvGd6s%2BxJsdo92FAs9q8rMdFWurS4%2FF9zTPEIK8zL7iY%2FFdZ2OxvWATT7sEktJndlHyGoGwipspPA%3D\"}]}\r\ncf-ray: 9d394c45ef9a0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2244857,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da666d6567625f9c446abf8c73f7fbb1","sha1":"ef6cf5e3356cc9a638933e87a82a1f62368d6d79","sha256":"120135d1ab1e4bda172dde9a8d4f54f1170a0fd9bb43ff2a3ce7e2ee9d52a37d","sha512":"cdff01b4c9540f74bca443c14480ae63d02a0f1ba45ba85e3361c37634803c8a0b3c5b9132eed65994b99b762ebddaad411dff92c244eea429248684c44ccdc4","ssdeep":"24576:7ZuHc9Rl8igFrFnPzpSxyxJER+6xlduesz3e6:7ZuHc9Rl83FrFnPXxJER+6jduesz3e6","tlshash":"282509d8b651b02143a725e5007f050bf33a5909b44f85e8f669e8da7cbd84e627bf38","first_seen":"2026-02-25T17:49:39.106734Z","last_seen":"2026-02-25T18:35:56.275448Z","times_seen":10,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":37,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmpi","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmpi HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0J4c4ELUPRTxh%2FbCXO27pOEYaAbW7VDNg1kRe%2B6r7v1%2B8GXTAAEa35wwU72JQeR1kSKUiq1qycMc905m2UbQXJieHJ8iBXPy%2FzaJs7u%2BjHg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50ab790d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=cf0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=cf0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLIEKSnoAShSkoebHkgEubshO0%2BxASEVHWd8NLccNhlAlvPhpsiHEXQU%2F13qRY%2F5WDwzJhtmxsbedaIphm5vDwFXa7SLoaX%2FBozUrgr4%2B4eo\"}]}\r\ncf-ray: 9d394c53ecae0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"88bb5462e5a147cac230743a67818bfd","sha1":"8d27478bcccb50924c17e178519a330e013aa50e","sha256":"d7c0570657ab4124f208daefc843d0bc5cfe4a05b0bc932ea115849c02d90da6","sha512":"862af319c217d6b0554a2ed4bf050e64a60784c795811062f278d0b2133de960a6df06e3983d0efeeac97d4c2bd1f40fdadb850e684899dc3aa3ae89ce28b53c","ssdeep":"","tlshash":"9f9002565c1c8246a89314a5a50a1f44002831602a2496488c5a522581881a22044898","first_seen":"2026-02-25T18:35:05.755988Z","last_seen":"2026-02-25T18:35:05.755988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/ac-chat.js?2.2.1770477070317","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:38.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /ac-chat.js?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-907\"\r\nexpires: Thu, 26 Feb 2026 06:00:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2057\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKDDLGjAVQcq%2BuFmTFMfeMX%2F0LRuTgTHkukOM5AXiUXQ72CAVSVgFfEKMQGI0089xaRqhHp%2Bhey%2BTAuC96rqJEfrpkEetKxIAzc%3D\"}]}\r\ncf-ray: 9d394c448efa0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-01T14:38:39.409214Z","times_seen":133,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/platform/lme/logo_144.png?2.2.1770477070317","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:39.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /platform/lme/logo_144.png?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-e2a\"\r\nexpires: Fri, 27 Mar 2026 18:00:24 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2055\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcNdFt5Vg%2BjjCtyY22uPBaw%2BKlJuRtHQvEue71fyFeEPCdiECyLYTgPM%2BsLIgL9T7U%2BZaNMWYKT6w2vEZPnsTlZXV%2FPwCLbwDYw%3D\"}]}\r\ncf-ray: 9d394c4d5a610d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3626,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 144x144, components 3","md5":"3119cabd35b2695492dd9356a090314b","sha1":"8dd853ce848eb0b404625f7a70ce1a713f70bb9d","sha256":"a559b1f8b893f7f7d36fe8bddc9e30c6e4288a90447dba5c97cab71af41e785a","sha512":"f044e8534c55c52de884fa676e784bbdda9de501a51fbc63586e1321d34f87244cb970b2694fea2508c7fc472271ad2698fed2513ee05707f302f570c79d018a","ssdeep":"","tlshash":"47713b2673a21228f910ebb951ea3bd15716f523a88a1f9fd380304d0e49ee40b5d417","first_seen":"2026-02-25T17:49:39.107729Z","last_seen":"2026-02-25T18:35:56.337507Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getCoinList","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:39.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:34:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHqNavw4EY9lJRjfCpsldy3n8lMRpslALEW40cYnKj1myY7zYYQooPToQlzOajG4Zh9TlRkEyRwGhLSalIlF2iTeW4gJs6BvHxbgPA5OWoMo\"}]}\r\ncf-ray: 9d394c4e6886bb02-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33255,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c22854300e848f766c870e3d857ce190","sha1":"96e2c89f36beac93b27dbc390e7fd7302a71c44a","sha256":"9d3a4d8aa4adc3d378887d4f8270b708e196dfcd81e66f1064499d471c959458","sha512":"65c1216ef0209795f9dd0a3f0541da4f17efca679fd4a57138b783f8f726a9fea3f9c78d8240636fbef7619f7850f0ef67ca3e8a5c5a7de26c89d6937fdd9e5a","ssdeep":"192:VX8vX9vbXlN9NXygOWXAJXko0X2MXVqOXxCgszCQz5VydkdSATAQA5guHZwXiRwc:8BN0SbylIfwFVpH0Mzp0H","tlshash":"4ee21e26b15c807cc5b9c4f51dbb3e63518d343ffdc98e4a86de099486e8eb52507b0a","first_seen":"2026-02-25T18:35:05.636203Z","last_seen":"2026-02-25T18:35:05.758014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=sa0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=sa0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtm1AMeYOK9sPjIN1MlZ41vULQOK1MI%2Fle8epdmhG%2Fd4yZzJ9BOetRFoau6x9fyDmUnHjh%2BwGC7R%2B36kRBHoA7K2ZvlvfkI1jLF8BtXAe7Xg\"}]}\r\ncf-ray: 9d394c540cbd0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c55f4fd36c7c147ad0521c6cce701c06","sha1":"10b7f234db03b74be6d3be92002287d1a339b266","sha256":"c2a3ae94f1d64b105cd54a91057d2646d5d4e79ece6834fdccdc4e22fba953ed","sha512":"345f84617ea90f2051d3d9a5fff3c8ec1b65200e665303e6c8ab5fbc71260fa34497347accd490102c0e538507c6d5674aa84bce5758d09c4bfc24ed15df4af6","ssdeep":"","tlshash":"619002555c1c9242a8c340e6951a138405643160267492484c59512d80881b23148958","first_seen":"2026-02-25T18:35:05.758728Z","last_seen":"2026-02-25T18:35:05.758728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/platform/lme/favicon.ico?2.2.1770477070317","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:39.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /platform/lme/favicon.ico?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:39 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqmwjFnnQEmzHPoYbTLSG%2BUsuTixmnBdPQ8iCBvDfuNXM6i0%2BNS3x25FkFxd8p9eJahRrNQFIVivDVgBy8LwQQvc75ax9U0d%2BUU%3D\"}]}\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2765\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698755ca-14f7e\"\r\ncf-ray: 9d394c4d5a620d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85886,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -112x-112, 32 bits/pixel","md5":"7ee69394515da578e906067252e93732","sha1":"e6e2efde4e8cdc00f9d306c0b0bac19be026de87","sha256":"83f086aaf96b7042d33adf57c2bd2c49ffd0bac247dc6639bcd8a9f048cd8ce9","sha512":"7ff8b409d0035420bc9b568be1a36a37abf2e4f2ba108389ef6617dabae892d9e03ab70d533a22deae90649365d214562f10e0ed1d993e86bbe0543e4a6aebae","ssdeep":"1536:qAjjjUbcaSccQbNiVn4dD6CTNKfMMMMShEzJI60aQaLkiTbz4YdQtAezTIIIIIdj:qAjjjUbca9bNiVnIXoqamCTrdQtAezUj","tlshash":"6c83d19d7934c58bfb694bbd78d8c17c692d12362c360219a768c3e41eb1f5eec89720","first_seen":"2026-02-25T17:49:39.082581Z","last_seen":"2026-02-25T18:35:56.268389Z","times_seen":10,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=pf0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=pf0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGiseJJkH3ubrwdidzoFoQlJdus8AzKNyekqrWIRSPN%2BYpJ6GxjrARnuMHdMgxr9VZvaq1Z4ZtJW8dtgmz450FRrz1VXSdgFbYagUcLPPyiY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50cb970d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6cd4653fb57646028aa52a0fba097508.jpeg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6cd4653fb57646028aa52a0fba097508.jpeg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17120\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C28B904430330EABF4\r\nAccept-Ranges: bytes\r\nETag: \"2C2535777E59C74BC9F0BBA3C492CF4C\"\r\nLast-Modified: Sun, 09 Nov 2025 14:27:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6180990207094404053\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: LCU1d35Zx0vJ8LujxJLPTA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"2c2535777e59c74bc9f0bba3c492cf4c","sha1":"2a103120647dfc9efdb276ad7d298bc1fa056cb1","sha256":"ec46f5222bf6d570bcccd374c19d290d8e50a65ba979ca74211f5bcc5a0d7092","sha512":"9edacc26b1bb97e6eb860d07d650f2563972aad2eb978ed1828a168abf1e170f1ec2c5493ce99b9ad48dabb11e165de5bf188ca2abf4f8f6e6c239c0b851a605","ssdeep":"96:87SNkY9WmU7n32pGn+NX7sc5ZO0DDJcCCmL2:WSNkUanVn+e0DFG","tlshash":"f8727638fef1b6b8594962362dc628095d7307c3e5c19c88b6ce4c1e6f21b9e8c5f652","first_seen":"2026-01-20T10:42:16.625731Z","last_seen":"2026-02-25T18:35:56.282418Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2182,"timings":{"blocked":1879,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b0a8d51c37ca49b186d87be0b4f9fb01.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b0a8d51c37ca49b186d87be0b4f9fb01.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 818\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C24C8B37383531D87F\r\nAccept-Ranges: bytes\r\nETag: \"1E9415B10C8C41A2950503BD9319037E\"\r\nLast-Modified: Fri, 16 Jan 2026 16:47:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2676412128320598560\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HpQVsQyMQaKVBQO9kxkDfg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":818,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (818), with no line terminators","md5":"1e9415b10c8c41a2950503bd9319037e","sha1":"a7082164c0fe7d6069009146a94e54f44882e127","sha256":"14fad1947ecd7c79f0443e1f4ffb29911ad828bc10aa8f5bd4a6eeb389656858","sha512":"3a573ca870c5d56954925880f76170779d1535503112cae40283e45a89ad080c5926940a540592a849dd4d2561dc12aa97c35e8707dd882064f7ad17aed9c18c","ssdeep":"","tlshash":"e901ce6c9336194c50838df0da6452e257ceb08af29002f8a79cf570f246bbef603938","first_seen":"2026-02-25T17:49:39.081426Z","last_seen":"2026-02-25T18:35:56.303033Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2493,"timings":{"blocked":2204,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/8e0fa33044b348358e09dc3f740bfc64.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/8e0fa33044b348358e09dc3f740bfc64.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C3AB4B81323770C41D\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Fri, 07 Nov 2025 14:44:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-06-05T15:12:51.685209Z","times_seen":1643,"resource_available":false,"data":null}},"time_used":2649,"timings":{"blocked":2353,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/kline","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 67\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rV620ORjf9V%2BD2OCd1GJZXa%2B85QIljPQqZ912lBZAaZNQFN8cqXkF3yuLP3oxEugcqHPUOHGDjf0bDRDvDiPU8cy8ZiYBpOk3S%2FMAqMEwtG1\"}]}\r\ncf-ray: 9d394c55ad6e0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71807,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"a8922f015fbc8e297a2c58bf5a2fcdf4","sha1":"5228d75cf1d5540ee6a5ee21b6c1267b8b266a57","sha256":"6b6ea3a1e448f2339e40737e874638a29a43f170c1ac6fdd177f15a1b60d8bab","sha512":"3ab4b051e5e34d7cc8226122a07f6cd24d7deeeb799e74a5dc9d46b7137fa268c250713ab55588b390f55f735cd3f8b4be87ce98f348bd2a58e2531f362d3ed3","ssdeep":"768:XKrKklSC3gEVp82XLal8eWelsJb2v/ZawR850ahecyCdbGuInVhlhk8pIla59hZb:XKhSC5XLaTGwR85VhecCj","tlshash":"6563413c8b958188d4354df66fb3bde189a334d74ecd9d81c59d0c083a90b3ba929bd6","first_seen":"2026-02-25T18:35:05.762431Z","last_seen":"2026-02-25T18:35:05.762431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXvTxYz8l1vgwvbo6VXrJyIv9JAad5%2BrPK877OmXZeNQ2lDQdLfO2SPom671HbUs1GRkRmspZNZ7JUwxWBrfODTsL%2FUEcN7SORVBo0jZBr4Q\"}]}\r\ncf-ray: 9d394c51cbed0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c335f9b22ec1625daf1673cc119c59cf","sha1":"e88dc4fee72c3e22df2fa3b24f4abbc03b19543f","sha256":"54b1c64925510b9988e9b9ca7ea5b09445f4dd0956a9122afe1e0626ebd39056","sha512":"cafc7ab754d7ea3353baddcddd81a29d04e16ffe572cabe58984870acb8ffb67091b8df30033a09944e315fb1f436f16176afefc848852525cefd9834c5fd37b","ssdeep":"","tlshash":"4d9002551c188242a89300e595461204102631643a2493894c5a5126848c1a22040859","first_seen":"2026-02-25T18:35:05.763284Z","last_seen":"2026-02-25T18:35:05.763284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b1953361ff424850b618b620ca55a6b0.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b1953361ff424850b618b620ca55a6b0.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 324\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C2C390C33335BEA320\r\nAccept-Ranges: bytes\r\nETag: \"67333DF7B2BD42AD8B8A241E2E9C039E\"\r\nLast-Modified: Fri, 16 Jan 2026 16:51:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8605808415853478241\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZzM997K9Qq2LiiQeLpwDng==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (324), with no line terminators","md5":"67333df7b2bd42ad8b8a241e2e9c039e","sha1":"b7fd3422d08dafa8430bffafb4dd77e1e5e8ad94","sha256":"e3adc1208a6d832e0873255de6544182ef121c293fb44969e0a761f1e538a079","sha512":"9f67f18648b579a82a0be3632dfdfd7f9f90efda7ec401697c0fad0c92fa40c124c96da794f5829026b633b2da752c9545e92e81a919c60ea776b4a695fedd94","ssdeep":"","tlshash":"a6e0cd69af5c179c440342a01dad9043639fb55ff16c01f5f4cd557431475aadc2759c","first_seen":"2026-02-25T17:49:39.140676Z","last_seen":"2026-02-25T18:35:56.280495Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1779,"timings":{"blocked":1506,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/7c07fe08e1af4619a069f3b11047deb2.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/7c07fe08e1af4619a069f3b11047deb2.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1181\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C3C390C3333551A520\r\nAccept-Ranges: bytes\r\nETag: \"D6DEB1AA7365929E2CF751B88E56B5D6\"\r\nLast-Modified: Sun, 25 Jan 2026 20:26:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14726560562703307949\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1t6xqnNlkp4s91G4jla11g==\r\nx-oss-server-time: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d6deb1aa7365929e2cf751b88e56b5d6","sha1":"e0cda9534a323c08abd29d3ff2a056207354b0f9","sha256":"efb48136213036c6ca1e9d0dcb46c97b5b0e92ab6d12b5ba7fe6b46eb8e8089d","sha512":"69b9e0fe30ade3046b5d9a04674af070eec5fccde45e1610f24b81909c5534e6413269e1a0e13bb6139a1902d31931b6ab83e3a1264a5b6e6155796dc0e52e67","ssdeep":"","tlshash":"c821c6fda34b6d8185134b33bdb7945ffcbabcb24021d2447604b85354760091e1edc9","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-05-27T00:49:19.368537Z","times_seen":111,"resource_available":false,"data":null}},"time_used":3043,"timings":{"blocked":2764,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=fg0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=fg0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWzFcdR3Xq16JuI%2BEda67ovlmZIVINJ%2FSmwJZf06siIGAf47DMKCBaranTDigIPL9YJwvjcV%2BxyX16KE7B0wOV%2BpYs3CiV0eNUzqTIJYZ2dq\"}]}\r\ncf-ray: 9d394c541cbe0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ab5d7a4aa7c6b1d0ee70493fafe9b988","sha1":"278a5320342b8672d5878d5af4851b752bd417c0","sha256":"8eab38f765f93a5de3e64d030501c9ebcabc4e9b665a3fdbde32d78cd0c1f036","sha512":"40d40fae59e62b1f111418ec8e04c14b472afea04f9ec79246639767b14f3a0c3e79f452685242ae27a6aac1b106d018da505b3eb5f47f65a992d30fd2ded745","ssdeep":"","tlshash":"a69002555c1c8342a89311a5950a164404243160262492488c59512591881a62044998","first_seen":"2026-02-25T18:35:05.765291Z","last_seen":"2026-02-25T18:35:05.765291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ROvwBV%2FxmE6%2FzrGZob%2FPcgxl40kgqflVxcCQcU9EUDEV9tRXv4SxDLga%2BcjdXh9Dcj1nfK8Kn70VQ%2Bt%2F3ZcNOMpNLOmiTecjhUDl6%2BClqf6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c504b4b0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0gLwIVu4ks%2B%2BYeRj%2FmvKcFkOoqBSMDwAMm9%2B38AwErSxw8k1fCP6a4gGa29diu4GYbUCmFRavc%2B24QlWl8RDyWrw6hBI22lssJMD4EYtH1y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c505b560d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/resource/svg/light/moren.svg?2.2.1770477070317","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /resource/svg/light/moren.svg?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGsQltaovOYDaCypxEN%2BJFsQQvomLIfiQBll1U0Y3xwX1A1a9%2FQbWa3ISRTApjvYwe0tQm1r%2FggoBaMotpoP6x7EGQ0k188Dj4s%3D\"}]}\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698755ca-133\"\r\ncf-ray: 9d394c52bc4a0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7717d623b9e9193c32f926e96c49abd","sha1":"b08948bab8fd14015ace9bda4c97e02584e3b7b2","sha256":"db1351d981f6ed6c4a52323a6ed5652c30cfde27c84695814257db98905f82cc","sha512":"60a0670f41290e6766018ecd268339a43a84672f54356006232b33239560ea377028b29b82d83574b2aee547de3567d164ac65e45403ba185a91f0822a494a76","ssdeep":"","tlshash":"9fe07db680260c1ea4090661cbf40a84807cf143c2a204edfba01473033042e1d8d275","first_seen":"2024-08-20T13:53:54.395904Z","last_seen":"2026-06-06T23:47:44.179116Z","times_seen":73,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/548b945222c6446185cce05589a2e523.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/548b945222c6446185cce05589a2e523.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 480\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C2EE2400363510584F\r\nAccept-Ranges: bytes\r\nETag: \"4634B9121E81DE18DAE239CF02D70AD5\"\r\nLast-Modified: Fri, 16 Jan 2026 16:42:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16244569326861285624\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RjS5Eh6B3hja4jnPAtcK1Q==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (480), with no line terminators","md5":"4634b9121e81de18dae239cf02d70ad5","sha1":"88f2fb9fde15e092f1cdb5847707251146095af6","sha256":"f3c7db8d7d7e971895455c497b0d25cdd65fc423c34720054eea9dc014678d83","sha512":"d31152e70401065eb44e49f881121644ed897ed84972fa42c4d5d891b37f035cbe5b3f9c80cd471b035c3408977e4106ca839385440858674acf87ebedfc19d3","ssdeep":"","tlshash":"e7f0a7a4371c18fc8b0ec2541efb7a5101b5f058b9b516f4e16ce09c3506a57dc92e54","first_seen":"2026-02-25T17:49:39.162187Z","last_seen":"2026-02-25T18:35:56.27447Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2764,"timings":{"blocked":844,"dns":0,"connect":308,"send":0,"wait":1050,"receive":1,"ssl":554},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6e24418e1fb44d6f95f77dafd2f29f37.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6e24418e1fb44d6f95f77dafd2f29f37.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 561\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C1AB4B81323743C31D\r\nAccept-Ranges: bytes\r\nETag: \"F0EDB9478D9F20FE416D9794348529DF\"\r\nLast-Modified: Fri, 16 Jan 2026 16:46:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15036309350262565821\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8O25R42fIP5BbZeUNIUp3w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":561,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (561), with no line terminators","md5":"f0edb9478d9f20fe416d9794348529df","sha1":"3b3220057b4a77a6c6f90cc00c088ebcc64bd78b","sha256":"3deaf39baca9a89bac2f82fb6f345be0618180ed2ee415720766bf74d9f30760","sha512":"7fb667252578637ebe786aedbd1592987bab9fef79846bdb7e61cbaf1574f273c28510ed90027073c73c225c551f7c6b6d8cb3ec096c07823823330c033cdba2","ssdeep":"","tlshash":"a4f08bed138ae088a216c0e15e5d0522e61fd081fa8f038e6494d315b1d3adb244d899","first_seen":"2025-11-12T03:40:09.606175Z","last_seen":"2026-02-25T18:35:56.366757Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1572,"timings":{"blocked":1275,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/9ae65135794f4d489c45317496dd4d02.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/9ae65135794f4d489c45317496dd4d02.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 324\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C2AB4B81323721C41D\r\nAccept-Ranges: bytes\r\nETag: \"661A50E895102AE166BE5679F674E7CF\"\r\nLast-Modified: Fri, 16 Jan 2026 16:40:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16860383506203607183\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZhpQ6JUQKuFmvlZ59nTnzw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (324), with no line terminators","md5":"661a50e895102ae166be5679f674e7cf","sha1":"857619be6e85e2ec976824510e29aa251ee949f5","sha256":"21660c6c6788cfb6d92c22bb741210b42242647dac1610d3d69930a3034e823a","sha512":"45f96727b9e87b66b9ef775c01aa7e764b084bb74f7856774cfbddeefa534c6c5944fa316f005bbfbd404cb973652ea802ecb024b0bba1e60f23f335d5a0a9cb","ssdeep":"","tlshash":"a9e0cd69af4c179c440742502ead9043639fb56ff16c05f5f4cc557431475aadc2759c","first_seen":"2026-02-25T17:49:39.139221Z","last_seen":"2026-02-25T18:35:56.353605Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2408,"timings":{"blocked":2112,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=zc0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=zc0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2EBE1iiT3FdXxgYBmPivxAl8Xy9KJepHVkvBXO3YBns6MhAXJvQ1od478jlEIvVkLZy76rR10Ws8RFVTKMKlQtPA%2Fn4sHQOQL0jne3rW8yNh\"}]}\r\ncf-ray: 9d394c53cc9d0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ae4594972486e7c8b9a146e81ae03d71","sha1":"fde96f116d90cbb743e9b94db00406dc05abf39f","sha256":"b6e682e100e0c30856d45cc7b6be3753dc202faa40d81ea404d63a7ed6bae120","sha512":"74274872db72c7c0dde8f24d997ac86ea1d2d30fe7f4440e1387c850c431898cf772573bd72ca6d5578d4fb4c6603472910a75ee907f390c927695c4e96bb2a0","ssdeep":"","tlshash":"409002565d1c9242a8c314a9950a1204002431602a69d6584c59522580981a6304485a","first_seen":"2026-02-25T18:35:05.768694Z","last_seen":"2026-02-25T18:35:05.768694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=sf0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=sf0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTJEM%2BQDWFyyVuvI4mrUcrv17811po0OAP1XDUhRQ79dA4inJIuoyMdvmxOrzWPhk1gbZjGZWKHSRHrSwW13%2B43RFFfCHmggUAdrnleHxrbV\"}]}\r\ncf-ray: 9d394c53fcb20d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c36b105ce45f182d73e9670cd68b08e6","sha1":"400c9a13be1d8e4467939a221803bb9536767f0b","sha256":"58b0ea39b87fa0cb82c7c61a695eb1954b7e72b956202cd11ccf8bc9b5e582d4","sha512":"cacc37a66a07e9b21859462b717b14ce045f69e8f3358c87d1a70a4d9d39665feb314221926ac084db26d340e7986c4eb3a19df02cd3ad490a57d6de97979f4b","ssdeep":"","tlshash":"1a9002955c1d9242a8c300b5990a120404643160266492884c59512980c81b2204c958","first_seen":"2026-02-25T18:35:05.76968Z","last_seen":"2026-02-25T18:35:05.76968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=sm0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=sm0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMNAF8%2BrcnR0MTRiAXgCHnPB%2BXbj%2FBj71uh16UUFgLdXZaZqN0nI4FUWZpkymEJ1jfX%2Fc9cLrEtB6pGraLki2M6sEuSXkfhkHvCXhrwpiWRZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c50bb8e0d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxc.com/resource/svg/light/broadside-btn.svg?2.2.1770477070317","fqdn":"lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"GET /resource/svg/light/broadside-btn.svg?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-57a\"\r\ncontent-encoding: gzip\r\nage: 2054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTgHdOP7QBbR73STE5tM1zgnfjnLVOyBKgJF%2Bfr8CsIN3fLmxZuhkxxOzVgj3tPo4Kp%2F2Bivd%2BYcyY0ivMSfluzIoJVEKpEp%2F9U%3D\"}]}\r\ncf-ray: 9d394c513bc40d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c27867c5fa5001c284912358d1088c32","sha1":"72a65c57047f38e6a9eddbb45f4eea4c6f174d4d","sha256":"521cc1eb8e60fa4570402a808ee3efc57966814258a1f90f3d0c83780c3c3686","sha512":"c18de18544928f4a8973bc78eb61721724833483b3b071758208845a12026413c6c373a479809a3825dda32c61d1137a23fc2412998a819f7af9e7598061f9fc","ssdeep":"","tlshash":"7921f8cb730c50c1e601a3e8a41676ef029b70db4eda8e5f68599dbd771e4a32506170","first_seen":"2026-02-24T15:49:18.956226Z","last_seen":"2026-03-02T23:08:53.792105Z","times_seen":22,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/type/defi_activity_type","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g916oDMoR6yMHRUUNGEqEC8AqJU6jIg4OIxHqIJpjXkh8O5kLgs%2BildzpTQldkPJujqNKic9666p%2FJak698c85XhXcQ3oH66Eic1AMlJLIW5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c528c360d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/kline","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:41.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 67\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xap\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttadgOTkQl9IqFDxrOedSpWZmyLZqnsCLXNBzsh4eTbuha401Br3HAuZ2UMRvLm4gc%2B5jye2ExbDFEwdji8pO6TRcDDzzzHIa83wveLXuOya\"}]}\r\ncf-ray: 9d394c571de50d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82047,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"de2a419fefd2f0a3cfa00ab45bdf5265","sha1":"0995e24272ad1de91463cf8368add34a73ff59c5","sha256":"fdd35c4660812f386c7d00d62da73bf5fa900c9dbba9c8f477bff49ae839eebd","sha512":"b8795bd8cf0be41a1a7315db5c4340caf4a1358848cb29fd94effa50587cab9541548e26bf7a28f95b8ebab81105ddd1d0d399d1034d90723740cbd61da00866","ssdeep":"1536:bEJzLZ+VCbwS+bkODzvELTlbnBNwGykQnkx:wVXe8LTlbnB7Fx","tlshash":"e0832b76cad6e48996318ec23bc3bfe20d2573d349fd8c1250ae0458568077ae94e7b7","first_seen":"2026-02-25T18:35:05.771047Z","last_seen":"2026-02-25T18:35:05.771047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":621,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=ur0001","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ur0001 HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ilrvXLfPxOHRGFOz0e0LIyFMam77BNKiGSf3uFppomzNV5tVSa93%2BbCFtSB9Iy3Ffft8C7PuUBmpIRvMYFBVTqJWuWplwJQTZGPXTZeKYJVm\"}]}\r\ncf-ray: 9d394c53bc960d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"adeb0756acc12033ff2176d88d328a30","sha1":"08c5480f0e3e98a71ad2da124896aa62ab04faaf","sha256":"545bf9624f7811dbeebc0a64298ce534a27f8c92b92afed3bc8d6c41818ed9cc","sha512":"b6558bd490990b93dbbf5f70a05aa94288d4ca17cdd39d6c4b70a362d6793eb088b1551a1a393d302f3a364ed8bce6fa047220a43aed20fa9ecf0a8f67d4bd68","ssdeep":"","tlshash":"989002555c1c8282b8c300b5950a120400283164266492484d59512585881a22044858","first_seen":"2026-02-25T18:35:05.772061Z","last_seen":"2026-02-25T18:35:05.772061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxc.com/api/common/getMt5Amount?coin=lmsi","fqdn":"h5-api.lmefxc.com","domain":"lmefxc.com","tld":"com"},"ip":{"addr":"104.21.18.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:25:43 GMT","end":"Thu, 07 May 2026 17:22:10 GMT"},"fingerprint":{"sha1":"AF:62:68:DB:51:E6:FE:0A:E0:A1:2B:EB:CC:8F:F3:8A:AA:D7:AC:58","sha256":"3F:0D:C9:79:EE:5E:55:BF:4B:CA:6F:83:7D:12:A4:73:4B:3E:75:68:F0:CF:3E:BF:5E:78:29:7A:90:B6:FA:C7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmsi HTTP/1.1\r\nHost: h5-api.lmefxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 18:34:40 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxc.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YttRCa65K1CN410Zx8ky9FVUnsIXx8kR7hDGH45zcP2h%2B%2BCVQhx3vtnAlnR2bY1%2Bn4j5jfopmkrx1MwrP%2BGkoAdL0I8IusQIQ6emyJUfN3y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394c508b680d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T11:09:47.585553Z","times_seen":16210463,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/24f4f5a6b585424c9c39fce72a50a5a5.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxc.com/","date":"2026-02-25T18:34:40.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/24f4f5a6b585424c9c39fce72a50a5a5.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:34:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 998\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40C14C8B3738351DD77F\r\nAccept-Ranges: bytes\r\nETag: \"FD3C59A8B9593835E263E09C98D5FEE5\"\r\nLast-Modified: Fri, 16 Jan 2026 16:41:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13001567079907275664\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /TxZqLlZODXiY+CcmNX+5Q==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":998,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (998), with no line terminators","md5":"fd3c59a8b9593835e263e09c98d5fee5","sha1":"aafce721591e8fcdefd68a2162149a5d512a55bd","sha256":"23ee496c5d13d6548ac59375c4709bd46004826b76cbedea1438242ef6632e25","sha512":"51377000d8fbbcc35600c903ea2d4e0c627e89532daefd8a9fc642e310ebec4ffd8a5beb30bf9b8143a55e26733283e600dfc68ab0512df8efedf2a3274d4d97","ssdeep":"","tlshash":"341102d6674c76ccea45c01c5f8b3596110b30defbba438aa0598519f1923cbbc1c850","first_seen":"2025-11-12T03:40:09.535703Z","last_seen":"2026-02-25T18:35:56.362335Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1412,"timings":{"blocked":1124,"dns":0,"connect":0,"send":0,"wait":287,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}