{"report_id":"bf0a89d2-6f32-4df0-a917-46727695af7a","version":0,"status":"done","tags":[],"date":"2026-10-09T16:48:50Z","url":{"schema":"http","addr":"ktxjp.cyou/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"title":"KTX","dom":{"size":108803,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45105)","md5":"01075591afe3ef49e882f346dae5a4a6","sha1":"7d134f7de03853542ad95f8d0d8ed4a698880bdd","sha256":"485e07187fc74551fb46a052daecf1669ccd77c1200f0186ab9e053e92bf0b4b","sha512":"615a94e44138458657e2c8ed14145730ffd6bf2164a180a5b4577e7da868d99264b315fa142090302918987ca8520afa586dc5c4f51d0e9c20c6b4fafb8c40ec","ssdeep":"384:OQ4C02ALAUN+5Ao0z2d6RyDl57oO6ZbESCOSASlSvSdSSSakEdz3ij6eQOj6eQXM:OQl0N1Sx6JEij2yaHGEdz3u8ImW","tlshash":"75b37b62748693a716b790c3d5217e2bb7f0f327d7699a02bafe05910fc3d79b50a120","dom_hash":"domhashab70333664a7eb9e365835d5bda7eaa3","first_seen":"2026-10-09T16:49:35.1152Z","last_seen":"2026-10-09T16:49:35.1152Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ktxjp.cyou/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:48:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-10-04T02:16:29.419083Z","alert_count":0,"request_count":1,"received_data":827,"sent_data":767,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2026-05-14T12:23:01.692825Z","last_seen":"2026-10-03T06:55:21.580349Z","alert_count":0,"request_count":2,"received_data":6174,"sent_data":1257,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mix-ads.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":5285889,"first_seen":"2026-05-14T23:47:06.027768Z","last_seen":"2026-10-02T21:13:15.642191Z","alert_count":0,"request_count":1,"received_data":11765,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"bin.bnbstatic.com","ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-03-27","domain_rank":229363,"first_seen":"2019-06-17T01:31:06Z","last_seen":"2026-10-09T16:09:21.828724Z","alert_count":0,"request_count":24,"received_data":129320,"sent_data":12561,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"client.salesmartly.com","ip":{"addr":"65.9.46.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-10-03T06:55:21.007595Z","alert_count":0,"request_count":2,"received_data":84970,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-10-09T14:08:18.646617Z","alert_count":0,"request_count":4,"received_data":2679,"sent_data":2803,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"newbasset.s3.ap-east-1.amazonaws.com","ip":{"addr":"3.5.215.220","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-09-13T02:13:10.97255Z","last_seen":"2026-10-03T11:59:23.487786Z","alert_count":0,"request_count":7,"received_data":126968,"sent_data":3718,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"neweasset.s3.ap-southeast-1.amazonaws.com","ip":{"addr":"3.5.151.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-08-28T05:58:07.001091Z","last_seen":"2026-10-09T16:09:21.928331Z","alert_count":0,"request_count":7,"received_data":11907,"sent_data":3825,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-10-05T09:41:11.254255Z","alert_count":0,"request_count":2,"received_data":287766,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.polygon.io","ip":{"addr":"198.44.194.57","port":443,"asn":39979,"as":"POLYGON-IO-NY5","country":"Canada","country_code":"CA"},"domain_registered":"2012-09-20","domain_rank":2808672,"first_seen":"2018-05-16T08:55:00Z","last_seen":"2026-10-03T11:59:21.813449Z","alert_count":0,"request_count":2,"received_data":9916,"sent_data":1211,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ktxjp.cyou","ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-21","domain_rank":0,"first_seen":"2026-10-09T16:10:08.068089Z","last_seen":"2026-10-09T16:10:08.068089Z","alert_count":72,"request_count":25,"received_data":118838,"sent_data":13301,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-10-05T16:34:03.690152Z","alert_count":0,"request_count":11,"received_data":1369309,"sent_data":5213,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ktxjp.cyou","ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-21","domain_rank":0,"first_seen":"2026-10-09T16:10:08.068086Z","last_seen":"2026-10-09T16:10:08.068086Z","alert_count":105,"request_count":35,"received_data":14633762,"sent_data":16822,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-10-03T07:12:39.897582Z","alert_count":0,"request_count":7,"received_data":5123,"sent_data":5903,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a761adae82e66ea852ff9dfe5d62a6a2","sha1":"8fba638638d6258aca41f41850cad13183aab4ae","sha256":"ce138793909d2df9a2315de10f687953f7fd65eeeea92d39e4e74a1ebc784dbe","sha512":"3f073e640aead9edf34ee615e6f55db942e5bce51242724657803d49471a9baaffd7230e0f6f6ed4771d2aaf01612d7bc9673955332223b4d204d62acfead367","ssdeep":"","tlshash":"f6c012cca1962d055916541551af68d45024a867f0986f128eb4e8453e920b99333dbc","size":178,"data":"","first_seen":"2026-09-25T14:02:37.416055Z","last_seen":"2026-10-09T16:49:36.120572Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d25005ffa55dcd6bb07db8badf8a3377","sha1":"0792f8b04587302e3b9655af8ce8e229373b9f67","sha256":"856202a516e8a53157b3bd9374746d81c955ce275eaff8d844361206925f822f","sha512":"4d9c4bb333b3318a33239f7f28c98650c23d30953b90ae32cf1ce69f1e011039f0b4183accb54a3cdb42679c34218837a0f8e2e451b326021960263fbc1e36a8","ssdeep":"","tlshash":"98c080c460d77d202511bc2052af24d86029405a75482753cdd8dc853da31fc5137d9c","size":172,"data":"","first_seen":"2026-09-25T14:02:37.280765Z","last_seen":"2026-10-09T16:49:36.121508Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"28438817a180ab19236f8e3257d3d019","sha1":"da52eb10d9d08aad0819d5b5735953837d8db09e","sha256":"0382584bf6e1b9aee4c7d58a236483b75847e8f0f43773dd14bd15a57c203480","sha512":"d45507ec1723033bc2fe000bad7c817dbcaf875d1dd3f4f3e410a5d56467056481008844bcb6d4fdf972331eecb17fb35a22197ace2a2ffd36b42e8e6ca227d8","ssdeep":"","tlshash":"62c08cc4a0c33d105602643494bf39e4a0348c2b74881f138cace8992e320f0d233edc","size":160,"data":"","first_seen":"2026-09-25T14:02:37.398743Z","last_seen":"2026-10-09T16:49:36.091037Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e6ef414fb515452ca8568cd51cd21106","sha1":"f3b8e543eb69c56eb137cb55b49bb8eab99d9f03","sha256":"29b7252adb526f602d2bcabdcb1b216e4bb0c3605fb00145fba2311784626d0d","sha512":"064aece2effa85233b8f6b8fd040693245ef40cd3b9ec08a276a25fa54ba02cab67cb54c7e15eebcd925067748d4868e6755fa218e4973cc2831392be8366574","ssdeep":"","tlshash":"80c08cc4a0c22d002606665010af24e4a0244027b4481b428c94dc582e220b08233e98","size":139,"data":"","first_seen":"2023-12-05T11:13:47Z","last_seen":"2026-10-09T16:50:47.334286Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"68b8c554dfcd66677493b067fd4b3bbc","sha1":"227bed90c5529bc9c838063d452284e102215df6","sha256":"39d460266a465cc07430fa4c974611def7032ef8b4b08628d8d64be2c6a13e18","sha512":"9226461a1b2e83b457dd6030acb43738b852e9b53db8f56c74ccf2bcf26daff2f01de4bff4b97d182e0ce253f9ade3bc0317a28568da7b61e31650e81caec300","ssdeep":"","tlshash":"22c08cc4a0c22d001622641150af24e4a024442670881b26ac94d8482e2a0b0823be98","size":139,"data":"","first_seen":"2026-06-29T14:59:36.670289Z","last_seen":"2026-10-09T16:50:47.290412Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/platform/ktx/customer.min.js?1791564382182","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"401ba0765dcb21edef2b7967c95ca957","sha1":"5370f6754c844f794d737717cdee93ee46c07e0d","sha256":"88bf19cdd60efdccce0a1113fe01a2f9bc3d37259afc60c9160a92d27a9f81fc","sha512":"3edacd5cec97289ee825d43c04464d1b9caa6c1f05c860699c405b45360c2a2cb2b49ffcbdcf5eb584b8275413d0314b85f86dc67637be48fe546e9b42dd3024","ssdeep":"","tlshash":"0a110d431c6364797bd5727b9b3f89ad3a9892436004cc20fc8dd82c2f809e20e5eee4","size":1089,"data":"","first_seen":"2026-09-25T14:02:37.218489Z","last_seen":"2026-10-09T16:49:35.947601Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b328edef916cc7bf1fdeb389b5661d07","sha1":"be897a337114691b10789de7e814644c5c4cc493","sha256":"55a9f80e9b3f418f07b8b7cffac25b6dfa971b690da09234545508356fb8cc30","sha512":"dc48c85326afb5b2cb99df0fd5b3ca139acac8e3e6eb1f41f40162c4993bec33f39e7f2ff0d7a55a1f350a2d669af2a531755a8fe653762e006613d5f5c7daa5","ssdeep":"","tlshash":"1a01ce7eaceb30230012243a365b24287579a63711c45d8cfe8d0be44f01d384634f1c","size":850,"data":"","first_seen":"2026-09-18T05:08:27.131411Z","last_seen":"2026-10-09T17:50:40.76783Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/assets/ja-RG_9k16C.js","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2b1d5bd569463e9bda97cb2d1336ab15","sha1":"143cba2291c3b119c7ff5f56a905b594bb480f7e","sha256":"d9eb95a7672ae9e016ec543106192bc0361287429388494abc5af6f022f5a708","sha512":"2dd0d9e114ead5663357ae53dac653ec5b047b51fae2ca70018ab15e0fc66f9f36d42f0c6a2f78acc5914cef89f00cd199ec5cf5091baadd5551aec714b75d16","ssdeep":"3072:YQD/RImTacUC19ZusjqrO3U/eiuCtuaYuW2M8/6bNVEsjD+ET3KbWzNED6VlxMGj:YORIdcUCQsmrPeihtuwW2OdOba2wlxM6","tlshash":"a5142a8ce75ea63494672663b66c64ca10688c47f4a1df768aafddd08780b4ef703c74","size":191613,"data":"","first_seen":"2026-10-03T11:59:34.143972Z","last_seen":"2026-10-09T16:49:36.023014Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ed4dccddd987bcc0b69d965f934e165","sha1":"d7e2859bc76afd25eb26d9aadd41106e6cd773b4","sha256":"de53c7fd8e36cc2a444a5448601d05a942dce759f9ccb4c675f9dbb557c0ff44","sha512":"0c58f7739425572a894e405797ee7c3b3cfe03b8fc203f1eb16b7637824820054c614e6432292c5b61c099653aa365539e0fe60b84c856776a0474952701f3a6","ssdeep":"","tlshash":"07c012d9a0ca29009a16a52465bf35d49026441a74481b468c98d8582d721b5d233db8","size":166,"data":"","first_seen":"2026-02-27T20:02:39.557015Z","last_seen":"2026-10-09T16:50:47.303938Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fd701417911a2316f09c76aed2310c10","sha1":"b63916b2d6eb17a12a33a4fd686167459fd26a05","sha256":"cf2aa87d78163207ff27acaba2d9071faf1fb1bb9abf4ab9c79cd164bcce2550","sha512":"732dfd27340b32a4a0ee8e259ede43fba482ef0e9b49606195a23c268afb62e65857637ba227ea8dd235ed7aa7bfa3dcbafb55b63b79d75fb3c552d068c6f81b","ssdeep":"","tlshash":"99c080cd70c26e1019059425146f28d490244436b44c57128cd4d9452e624bc4133ef8","size":157,"data":"","first_seen":"2026-09-25T14:02:37.431871Z","last_seen":"2026-10-09T16:49:36.10654Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59dbbc3883fb8a47e118e1c01a72cf28","sha1":"bae75f8d3f74ee2ed7f0ccad11d386b7bffd4563","sha256":"49d1f1919a99f886f207bc55be2877802460db978308fae6f3e0f0160dfb4e12","sha512":"0f51e6bc2c30a95dcdb16228fd61de7580af35e070bbd36d86c3f55ca42c4d0f728cc61374d5dc74625b0b052a91b888f33b0219f99ca3ffc11ce35b32e661ba","ssdeep":"","tlshash":"6cc08cc4a0d72d001602755124af28e4a034442b72882f028c98dc983e620b08233ee8","size":148,"data":"","first_seen":"2026-09-25T14:02:37.315263Z","last_seen":"2026-10-09T16:49:36.122081Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"65c24bc853aafad6f27ef0961015ff09","sha1":"476d791c97083ea254fe048303212b2a81fc6fc9","sha256":"a876a34f198ccecfeebb67b117a660edd6da73983da4c9cff46cacda69d02eac","sha512":"00fc73e9ad259637dff855bc22bb3809bcf1946782336e90c9631311f15efe985bbd050bdbb8d1fbc8f314001ebf255f78b6a16e7a615df38bed7d12940cf80e","ssdeep":"","tlshash":"32c08cc5b0d23e046a02a86010af29e89028403770482b13dc94dc883e620b09237e98","size":148,"data":"","first_seen":"2026-09-25T14:02:37.371226Z","last_seen":"2026-10-09T16:49:36.072279Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bbf6b0171f3feb44344ea3506192fca","sha1":"99efd9e3bcf49bb168cb02b97e2307f04ea33c00","sha256":"715e5364252b0b8375c3c24f2786b543e71c49b7c322eba63dfc0f2c34734448","sha512":"372d7173ede30cbb3548d235b5ae63bf959dc9702b238e8433ed2d9bba4658e3fc96e02bad0d182e13a398fa9c186e3b6e8c98d78863e1a45b35d2091e4727b7","ssdeep":"192:UoHXYpBtFRiX0QdIYep3KmWnqmQg2uzB98I6yYH7ltCAwxeon2OyTVzY9Hw6RCjP:5HXYpBtFYXSYCWq5g2hyQmGu2jyijVK6","tlshash":"c3321a193832697556b80c9460799301b5ed27633005d4f0f2fcce7eb695f8782b9eb9","size":11360,"data":"","first_seen":"2026-10-09T16:09:38.599424Z","last_seen":"2026-10-09T17:50:40.801401Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3530de0be043b13dc61d2a6ab85e1ddc","sha1":"3bce409a070651a5d6c261abf67c7a3e6093670b","sha256":"123b28400e5a7a1abd84d124bbe5306889f72489c48b111ce8811408b2005213","sha512":"e030c3e0c629e6e2175737dff42564bd3a05302558f19bbdb5d05152ef730e22ccea50991b9a891c97e2715ffeabc9534a8a5dc43cd708d0f2610c559add0e00","ssdeep":"","tlshash":"5ca0222f03e020f0000f3c800e080002e28008cf3283b802b22c0e0bab200083f08c88","size":70,"data":"","first_seen":"2026-06-29T14:59:36.672536Z","last_seen":"2026-10-09T17:22:19.45613Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d2e82666d83cdd91a7bb514fac0b3b","sha1":"3f9679ba00e4e538044e648cc99bcc4b77a74167","sha256":"9963bf125d6aa44d3ccbee38fab1a4c380ba99bdfb8da5ff75e429c129963437","sha512":"2af515581d2c57ea1f371ab6f57125ec8af0e54063cbc39230f24a5754aaf603de17e990b759ce625cc1b22494f60e907fe9bf26b4f937cf88e528ee2ae16896","ssdeep":"","tlshash":"4cf0272f166a7568230b809a8a3fb951246061a54006146577ccd78cfbd6a6bc4ceb1c","size":566,"data":"","first_seen":"2026-10-03T11:59:34.268573Z","last_seen":"2026-10-09T16:49:36.056861Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5792a45ad0f3bb9e1482a6cfb0be2bd4","sha1":"9f86e396c41dd7cee9647d1f7dce29bafdf19e07","sha256":"0c79ce8b304514dcb2cc34f8aa5bdeb20da4dbc0bf1065475cb9973acc07e4ab","sha512":"5b666286f4e9f1a88e42b8ac79fee8fd4029b8614cd681ce0b4085f22bf66d825539929184e5704e4456fc75d1a02512a4100f573de6d6de8a72fefa0b693d5a","ssdeep":"","tlshash":"e1c08ccdb1e22d201602b96121bf24e89034486bb8481b028e94d84a3e660b88233ee8","size":151,"data":"","first_seen":"2026-02-27T20:02:39.582122Z","last_seen":"2026-10-09T16:50:47.265994Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"72412b309a07ff72d79234caacfcf8ff","sha1":"0e39fb97d53f735955f1df70325d8e0f24e32840","sha256":"5c308c8d9f18da1f914df90e58a6d3475b5c00319f768efcf6f1e27ebe313d7f","sha512":"57beeeec275ab13c404829acef40720fdf3146fc34229bdc0e7271c93e35d3f0079024020e77e8f8077dcb744e9323305633e0c61501c32b88e7a4df8fee9d31","ssdeep":"","tlshash":"0ac080c870d66d0069165450556f34e8a034401fb45c5b56cdd4dc4d2e660f84137df8","size":167,"data":"","first_seen":"2026-08-10T18:26:08.969599Z","last_seen":"2026-10-09T16:49:36.082391Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad4388f4dc3988e13204e79104acc448","sha1":"e1f0b1f033dad22878d6103da9fcea05e35cb14b","sha256":"87a9c125befeee63dcb6c2768bf2bde983cdb5932190cc2050f615df9f0517b4","sha512":"205dbddba6e2eb64f8c85720ab760daab2defa197a94e19babb9aa2399378540cb6e3934f716f58e5a3c35f793c222dfe2a6f46c4a05fb88edbca406532ed335","ssdeep":"","tlshash":"bbc08cc4b2c62d102a0a642020ef24e4a024402ab0482b039da8d8492f230f48233e98","size":145,"data":"","first_seen":"2024-08-20T17:29:46.83609Z","last_seen":"2026-10-09T16:49:36.077351Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"382b58f1b29f4a2cf4bcb11cb2d61131","sha1":"adc13d659b00d4f5c8811869c999792bc4077ea1","sha256":"0adb44d14c03d6afeda02c821e52741897d0ca32bfb3db52e8912106cc4f14af","sha512":"7b54d19954fa2226b50141fd9e2461587960f9fa2bf2d2f5bd93884aae635479ccba5414158e6d1d7317dd243a5e6dc999b53d0647c6d8d1a97dee2d5db982e4","ssdeep":"","tlshash":"cfc08cc6b0c22d006606641055af24f49025402674481b128c98e8583e220b08237e98","size":140,"data":"","first_seen":"2026-02-27T20:02:39.546756Z","last_seen":"2026-10-09T16:50:47.330174Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f72a63db749d6a77568beb1f6200353","sha1":"582ac670c78412005b1fee73655a93dfeb0a2e8f","sha256":"be53651d109ae8106fae116a6235794a7d6fc4698626e8ef0632c082ac0fb28a","sha512":"a3f033685966bca25631f7af544798a297353dcf42bc6e7bc69b6aaa4c5ab9381e633ed79303de075b5dc48d19a1deed6e5c0f9871dc5f8709c59dba69066739","ssdeep":"","tlshash":"8ae0c6dca0f27a349a00882240af35e040194cb2f0989a124c2dc86838632bed13b9b8","size":328,"data":"","first_seen":"2026-09-25T14:02:37.408149Z","last_seen":"2026-10-09T16:49:36.151672Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"34974e1f164a0696b78b3853574ceccf","sha1":"f3a1df7a9d1590a2caec6b321de7bd24958d591b","sha256":"6475b182a0656da348d7a094db060519084aff3a72d1cd93a8e7a462ed8aa328","sha512":"e4bf3d39b8528d80e4fe42b4c8c1191924e06143b828adfc8839c0ccdce8b4045b4e9af174dc621ff25985bc8540c64204007001fbf6189a5741531e1c3c779f","ssdeep":"","tlshash":"c8c08ccca0d32e009a0a642469af36e490284427b84c1b128c9cd8492e220f48233ea8","size":148,"data":"","first_seen":"2026-09-25T14:02:37.422094Z","last_seen":"2026-10-09T16:49:36.067907Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2f3f27ab3c21e0796cc1b4184811adf3","sha1":"b512e145dcffbbdcad04549877194a6efe785bcd","sha256":"655692fd26c3726a7f84d7ee10352923824f28cecffbc0ebd353e368a2dceb80","sha512":"5fefd6c5c80f439472208eae69d0d03a0e54263be81a500f6a513ea38b457e955c1689fb8736c7b96726140b81d6c4e31d7ae24bd79937a32b878556af44d751","ssdeep":"","tlshash":"19c08cdca0c32d206a0ae52050afa4e8a024402a74886b02cdd8dc883e230b09233eb8","size":153,"data":"","first_seen":"2026-08-10T18:26:08.971018Z","last_seen":"2026-10-09T16:49:36.057929Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ed2517786a29bf3778df0ce831263571","sha1":"1583937d5ae8db6897ad1e14db01827e6894ec46","sha256":"ec76075974072d1794bab86d10e2bd79aac6c10ee49bbd636df712f0e0cc2dfe","sha512":"faa52147ff439ecd7ccad03c8341d54d821f90d85c79e9cb49b36e3e0ff5b5c8f50ec158a7927c7c6a3d0ea0386a5bd8e5ce716244a217bd54c42edefd0b8fc4","ssdeep":"","tlshash":"b1c08cc8a0c32d002a0aa51150ef29e4a02440abb0882b02dcd8ec482e230b09233e98","size":150,"data":"","first_seen":"2026-09-25T14:02:37.352917Z","last_seen":"2026-10-09T16:49:36.059436Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9ef0b7f596d8663c6c196eb5126b0957","sha1":"4632853974eaedc65ce3fdc34554b1cdefdfaf2c","sha256":"8eb04cf0b9ab988dc7a873ee6153e6deb666beedbd49481a9eb511793b558920","sha512":"b941d51b311ba69a7ad5214f2828019ec795439bc0877d7663758816e444cf7f7811f0f2ae9622060aeccb4f3664ff1dce0065341349b57fdad3124b05a00935","ssdeep":"","tlshash":"3ec08cc4a0c26e002a12642070af24e49024402b70481b028ca4d8482e220b08233ed8","size":139,"data":"","first_seen":"2023-11-01T19:36:22Z","last_seen":"2026-10-09T16:49:36.102823Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8c55f6c1a10e3ee2ee2d744c39856638","sha1":"6b1ea01bf0a8d7a366b82d6c12ed9a4ab7833356","sha256":"4ddb37098c03d4375cd01d6a5e2e73d615b39266c1a477d92bb61cdeefd7ca35","sha512":"9d9106898b79a299f063b1fe4ee2bba746b01ce703f77e24b69d55abccfe3a2002dc7a09108590d341325b1d45225dbda372a564a5ced5ae54937c74d26b64c4","ssdeep":"","tlshash":"b4c08cd4b0c22d001a02651154af25e49034502a704c5b038c98d8482e320b4c237e98","size":142,"data":"","first_seen":"2025-09-12T15:54:17.459197Z","last_seen":"2026-10-09T16:50:47.305696Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c33b846812ff14ed96ebe23c20d19d6","sha1":"3d01badc418c488e3cc4e00cbaf8e6d7f9a1c7a2","sha256":"edccc08e3dcee27fd13d0cef726b69c6018300fd65ba396c007dbd87704fe141","sha512":"0dc707ecb008ea39d6cfa49274b849dc9d47f0cc676de83ca7594c0b3a759840c6e71efcfdefd25675514d7771c1c567f2c2753f6e4eafc679c63038cf6aab2d","ssdeep":"","tlshash":"29c08cc4a0c22d00161aa81410af38e890244027b0581b02cea4d8593e220b08233eac","size":139,"data":"","first_seen":"2025-11-12T06:48:53.13823Z","last_seen":"2026-10-09T16:50:47.371398Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bea5d13c5c7ebd4ce67c0be7b60b9279","sha1":"2a783621892d1f422c57027437e6094f6d33ceb2","sha256":"12d9dcda1012c3eff8ec179f62d7aaa1499336f3389fa0eb119d3098a8a8523d","sha512":"d7105c9ca4ef1ea05f76a0ed913fea8ca231444efc697307904481f95683e7a48893493850a6deafb7e6ac36452b355b427912f934c33f9faab0fbf442a5fb42","ssdeep":"","tlshash":"adc08cc8a0c23d005616643050af36e8d024482af8482b028c94dc583e270b48237eac","size":145,"data":"","first_seen":"2023-07-07T23:43:46Z","last_seen":"2026-10-09T16:50:47.32851Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ddb5f3173faad5ec16be9e6dc8a3896f","sha1":"cce81143ea1deac68937adaa8a1715a39470edef","sha256":"86136190c509eb40265ae9bdf8e451142bd99536adfc66f5308f7bdbe1612e0c","sha512":"b78696fd0805eda908a4d0796e7795fe59d78adfcdc6a10fed6c779b86d9b0ffa29a5cebec830e8514634d94d22df19ae463efa7917b02b5759130e35e4649e4","ssdeep":"","tlshash":"2dc08cc8a0c26d001606642015af25e49029402ab4482b128cacdc892e220f08233edc","size":145,"data":"","first_seen":"2026-02-27T20:02:39.550065Z","last_seen":"2026-10-09T16:50:47.299056Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf1066e59252dff7bb1ebc7a139067ab","sha1":"607a4203ac62e1d50184bf5773423f4019830cfe","sha256":"2dab8d19359bb8fc70ada4fa8b7a6e3321523489c518e843a18d3789cc3782fb","sha512":"048f37a29da1bcdacee6797c82e1d27a3ba4b82ca85d166a27cf0cc0741663176e551bcc2f56b220d6359d8f418aad6672fe1326b276561baa84ab54af08e069","ssdeep":"","tlshash":"6fc08ce5a0d67d005612642811bf28e4a034842bb0486f168cecec882f220f0e337fdc","size":157,"data":"","first_seen":"2026-09-25T14:02:37.430966Z","last_seen":"2026-10-09T16:49:36.150506Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d77fa3c717cc616198c796155a606708","sha1":"2a1a0e4fb33f91b6ae95abbf060e7e3d7166bd0b","sha256":"27f05ea5fe84f239f019ed62f299abe96a813a79066466dac48f3fdb851beeb4","sha512":"c13e97889b496944dafbdce2ffcad3586dfa4f576277a0581d337ebd44a1a5216931e194e3e8471b12729d319982883e0abc9b49d27d53d98f21e0ff4f85f1c7","ssdeep":"","tlshash":"1ec08cc4b0c33e005a02686855bf39e4a0348427b4482b539d9cd8582e270f4c233ed8","size":151,"data":"","first_seen":"2025-03-08T16:32:31.472097Z","last_seen":"2026-10-09T16:50:47.337783Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b72232ed380a528eeb3a552d77ae9c7","sha1":"6dc118004f8c5dcbcb571446e544948e5884cd56","sha256":"b7d4991a24ab4ba72ab4e3cfa67e51ed181d0f21335bd7adb062d024a1564c4a","sha512":"9a7cba48645dd78c7a719297ffad44b3da7263835e444e0fde947908fd4345a1cbb1d672b3e53338231cd6a11b38c7d45e5395f1387d368b0e8f93beea4d6347","ssdeep":"","tlshash":"77c08cc4a0c26d001602649010af34e890244027b0485b028c94d8482e220b08233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.519141Z","last_seen":"2026-10-09T16:50:47.343722Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7882824ecda41d5023fad93fdf2f44a3","sha1":"4be7c47e7c13c6ad984ba837b9004de404cd0554","sha256":"1212dd40a78668b4704cc68d17984c2fd7a4d8a8b4c9d4b3fe24bc809afd0c94","sha512":"627614d68a02bca8898f5bb249c1f3d7a9ab1e7d6ccef21a1600d9b85a56e7339773a89b5dfe89a16f442f4399b0ec8d52b267c8879bdc6ad4454367bd191233","ssdeep":"","tlshash":"95c08cc4b2d62d001606652010af24e4a025842ab0482b129c94d8482e230f08237e98","size":145,"data":"","first_seen":"2026-06-29T14:59:36.695611Z","last_seen":"2026-10-09T16:50:47.280925Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"24981c052025d4bb3faee554e481b868","sha1":"465cf7faef274c7ee744ff4a7291a71e273b5afa","sha256":"5fa462fe66b13c187c242a9ef11d553b4b2f2b0b9068821f762ff5f1baafe9ec","sha512":"9eec98ddcb9a4ea01ebe5a385a03cd2753463b9fec17082f88942adac51f0245704cdad5e07eb5b08606eef35597b4f29da0d296e61a55276c51e4d5b3fa8931","ssdeep":"","tlshash":"8cc08cc8b0c22d005602646010af24e490284826704c1b029c94d8492e220b08233e98","size":139,"data":"","first_seen":"2025-09-12T15:54:17.456861Z","last_seen":"2026-10-09T16:50:47.286793Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","size":50154,"data":"","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-10-09T17:50:40.846878Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7b967fc0baaa69de5f37618ea5391066","sha1":"201274485942bd1439f93bf43dac2d1e195f42eb","sha256":"4003d037b5cfa1f43a7e58c9907f4eaa14f668620815ebd551dfa1978e1c5a5c","sha512":"9ae4fde0d5bdf0187340c6c542c0ddb9beeb89912d51fd649d41979b8c0c75ec0299bb381e8cb0dc7422ac8b0fc0984595fd0e24cf8341c3dc0591b542433816","ssdeep":"","tlshash":"9ff0735b74702d563940561c82db69a072261477cc2d3a04bb54ed087fdf92f737009e","size":640,"data":"","first_seen":"2026-09-25T14:02:37.327653Z","last_seen":"2026-10-09T16:49:36.139543Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ee472fc0a8fe9d07454659eb2135a4e","sha1":"b8df51cc7c9e58038af4742970b0898496028510","sha256":"9e8388bc2c954267db5e00d1ed87e039ccedf92d8643d0537bf3c3ce5fcbedf6","sha512":"556517e6e3ca3cd96ed6a285284a869f845e8219a5685f04e1020959373bbeb0f2018fb36960611a4fa36464bf2718d9bbb6efac957f5d5f072c28411e8b319c","ssdeep":"","tlshash":"46c08cc8a0c22d201a02691021af25e89034402670481b028da4d8492e220b08233e98","size":139,"data":"","first_seen":"2023-11-01T19:36:22Z","last_seen":"2026-10-09T16:50:47.268085Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b9ce4c0b6ad7f2c5097abbc131e36d55","sha1":"4b5dbd43fc83a898288d334f38761b19e3258fc0","sha256":"0acfa50186148f938941619baeeb57e8a4527f02af7930eb6ae8c08ece825ec6","sha512":"df6f7ea6defc143e5e189dc6444c20fa3517dbe50665406d57fd387a8c1a9a8d7a74d0512fb059aae06b4f31705275b79123a89f3c0cf1075ab4846cfdde1243","ssdeep":"","tlshash":"c0e026eca2d6283869021421629e65e45058485bf14c360bdebde41929a2678d363a78","size":328,"data":"","first_seen":"2026-09-25T14:02:37.310265Z","last_seen":"2026-10-09T16:49:36.144956Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c52b489063f78ba72a21036ba5dbd01","sha1":"17e58208a7d6b233259d3dee712522a7955e0dbb","sha256":"a6c6a5b5cce81d71343410133c0bc73a13b9251708247fd40875a3fd8ea7d3ea","sha512":"080f73c624332074130eace18dff11f8b60105d6a3f140b7026537414a778df5304f32473259e6384d20217f5b690a6d5fd3eb69be74d7c3c7abeb994d6c31f2","ssdeep":"","tlshash":"66c012c8a0d629115612655152af25e49024402675481b02cd9cd8493d666b4c123ea8","size":163,"data":"","first_seen":"2026-09-25T14:02:37.377381Z","last_seen":"2026-10-09T16:49:36.115461Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a3745d9b7bc4a8b7012b180dd99eceaa","sha1":"574e86b4a5775181be1ef4784ef5787fdb542b19","sha256":"35e754aeab68f534b7ead101f81caab2a3e8a0f0f03bed2fc9a8ad96c070a2ef","sha512":"5c6b8068c77c14bd1403f21e03d4c568537b66e870790a924a148ae8acf2be939c065754111be3c486510e7c8b63919ad5daee12ba0a43b9c0ad0251c52fe94b","ssdeep":"","tlshash":"26d022c4f1862c100915a88666af30f46034407e72c92f07de94cc992e262b18277ed8","size":195,"data":"","first_seen":"2026-09-25T14:02:37.428101Z","last_seen":"2026-10-09T16:49:36.146679Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d86889d85aa4f75f6aa5b85ab13e199","sha1":"fd271e3fa3cc8e29bdac178229b315d3c002dfc8","sha256":"421a798c664e7dfa301dab40d98da4aa314db82f0c8823b526c85049dd019c06","sha512":"84bf093ee64f91e6a17eacd50f684e8f056db07767f4fc386f11ae287ea30948ee68b15a551269a71667c009a4a1275dcc816592ed331e61c8758bfb1a8fd017","ssdeep":"","tlshash":"8ec080cce1c26e0059155410b07f35e490344817b44c17029d94d8592d160f44233efc","size":157,"data":"","first_seen":"2026-06-29T14:59:36.780833Z","last_seen":"2026-10-09T16:50:47.27142Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-10-09T17:50:40.725037Z","times_seen":3130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/vconsole@latest/dist/vconsole.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc72ae9898f9bfb7b300dbf33a738902","sha1":"cc79a9522ef457188c18283228b2b8759b7faf1e","sha256":"341885ebd1db9f578514e86279a449c0a698be8826d94941808d6b556283ea16","sha512":"e39af73dc41fc13ebd886d41c0638e64a8cd2832254f87e9f00fdab879680006a33f4fc75c514682d5f68c765521f86399a5dc5d54d14a51aed4e49a8cfee0cd","ssdeep":"3072:z11iHWXsqRBvkeoTZY3bN+/WwPKgLfERrSmBtVVR++sE:TOWX7RZN+/WtKM9+w","tlshash":"b95409ccb2c2706552a374f4516f240ef37bad44780b8098b63ad8d26d7ca4e61a7f6d","size":286369,"data":"","first_seen":"2023-07-04T08:13:02Z","last_seen":"2026-10-09T17:22:19.379213Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1ca44ab71f4a0a5c689182eff671bf1a","sha1":"ef11cf1b4d39402c3019071d6f29d0354e724d47","sha256":"c601a1617128e859f6fc5c915a296e7a8a526d3e51b45e387415090510439e02","sha512":"dac2d41e61b5f993decf5e167acafeb6208008ceb991442cccf01c94227ae0cb7276774671ea86fdcc58e7934613ca423fa7dc7abdffd9cf516be44010372a62","ssdeep":"","tlshash":"0fc080c460d37d045515542150af25d49024482f748c2b528cecd8c52d720b0d233da8","size":157,"data":"","first_seen":"2026-09-25T14:02:37.418471Z","last_seen":"2026-10-09T16:49:36.145489Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"51989ef335c21f32d4808974084a5924","sha1":"ea20ebf084d4ea7fe3225c59d936afd979e17369","sha256":"2aefba3b41af9f59dfc4b95d64812027f2373bbc98c3eea7f30d0aaabd88e6b9","sha512":"8248ee405bbef6d7fd494043a471984fff3ceb62a86c48c62f767e51ea33fa54f395c455fae53d5f2b434c0b2366e88e6fb060b869aadde52381bbf15735c03b","ssdeep":"","tlshash":"dec08cc4b2c62d001a06651110ef28e49029402b70482b438c94d8682e320f0823be98","size":145,"data":"","first_seen":"2026-06-29T14:59:36.68413Z","last_seen":"2026-10-09T16:50:47.345316Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9780b3dc0cb70e7d1d7d750a4744845b","sha1":"e0ec38d147e3f44840b6336d6b102cf7dedb7ddc","sha256":"719cb0fcd7ecbd4af60e67c27872bf81e58e3f0707c7c64b27439a363351b00c","sha512":"b8a1fc870289eec5dbc78913cc0ecf44537d0072ee19f367a531894ed757a3881001af51c486267b1b0da126455b5dca7fa317f6dccf71d52fe87c9c187921e0","ssdeep":"","tlshash":"6ec08cc8b0e63d005a02a56014af38e8a034402ab49c2b12dca4d9482e660f88237ee8","size":148,"data":"","first_seen":"2026-02-27T20:02:39.578867Z","last_seen":"2026-10-09T16:50:47.367054Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ba45af186c0ef01ce70df208f01f8706","sha1":"a6f3962edbc5aefef578d7b58a76a56182564059","sha256":"3a0f84e2b1dea4e0f042714578d2ebe9f2505f3dbe3d4db7cad4ca38371f749e","sha512":"4b33c49d12877d8f1c2b7c85dc2304dcd451d8f6eed9f5cf690098a3b4829b5dded337333453b4ea65750872852d78d94c5e4d78b02eebec0534261d67d4092d","ssdeep":"","tlshash":"75c080de70c22f103712985114bf34d45038cc9bb48c17438da4d8442d320f55233ef8","size":164,"data":"","first_seen":"2026-02-27T20:02:39.575532Z","last_seen":"2026-10-09T16:50:47.390862Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"df73610e99574c51645acf9a32b1a571","sha1":"ba246251ac17d633b0a54b2939d29b69f1ba4ae2","sha256":"514cf358afe20ab09cc13d34f27b29c1768a3b28bc237399ae638183dafa4eab","sha512":"8e8affa402b874491d8240b3f216df635e13ef8785dc1d6f6b5179501d60362f61c2245bf054f3df1a06af624971e55697ff9bcef56163fc668e78a3a5aba446","ssdeep":"","tlshash":"7bc080c470d67d101502542114ef29d46024441674585743dcd4dd453d620b44133d98","size":154,"data":"","first_seen":"2026-09-25T14:02:37.309048Z","last_seen":"2026-10-09T16:49:36.051906Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ebab50fa78a7fbe6cba9d82a9771e78e","sha1":"be45f1c8ec3bc92eb1fe31eb33401ef294805b18","sha256":"554f668d054ab64a213341bc3a62c3fb69efaed2b85d3c1a3282f0a3e0b8722c","sha512":"b628751c67e6d36f30e045ad506f570712c0cb071b0ba08e13a01fb0a816aaad1bb17bb3fd57450e7e9f302fea9663ccbcf9ed0567d3e2330e04536df7eeb80d","ssdeep":"","tlshash":"f9c08cc4b0c62e041602641011af26e4a034402a74482b168c95ec483e320b0c237eac","size":145,"data":"","first_seen":"2026-07-28T18:20:13.755466Z","last_seen":"2026-10-09T16:49:36.067389Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1bd8fd59d32b78688441813057f4cf12","sha1":"3a7afb7d88c9bc82a44848e5639d62c79d865b92","sha256":"a64d37793372b667f0b3358281cf723783afa2df02db9e20783fba13aba8face","sha512":"2ae731d975a2ec9d8fa1db6c312c05f983f3c8f4a797c0ec660bb41e03445de6f4c1c565de765f11f0de7ddd81d87b6ddbe0af69bc52cbfc793376b5ee63131f","ssdeep":"","tlshash":"d0c08ccca1c26d005a16643055af25e8e024842ab8485b02dc94e8492e620f88333ebc","size":148,"data":"","first_seen":"2026-09-25T14:02:37.37241Z","last_seen":"2026-10-09T16:49:36.132055Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-DxbZSAdd.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a9ca07bef0855683f67ebc5f94b33bc","sha1":"37e8284c133ade3bdec668391ee8b20385cfc20f","sha256":"0fc0b16017c29483711acc09fbcb6712ed0f245312505f8c7edf11b2b260f6d9","sha512":"3ebd15f431213968cd73ed07936198a83f0f7e1d3655f7ae287451387e684bce10b8c9fdab1d29ad13d2eaed74522d9ab3aac34663fc5a44d2c2ce169c2085ac","ssdeep":"12288:CwV0Rw8Ztp1fn0rteSw/b/xpnfrPRTUvE26325KjHaDCGOLnNr/Ja3ehw/BDtj/o:eRLnhAt/g6+2hNMN","tlshash":"83c46c4df2a5783693f75490a0e60444626c0b6de00488f1f5bc9eb917b2da2e3b7b7d","size":556891,"data":"","first_seen":"2026-10-09T16:09:38.509986Z","last_seen":"2026-10-09T17:50:40.816258Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0665dd3e41aec0f8b15601e01536f816","sha1":"297dbf908c9798a0b5a0fa2f448e2efcc032d780","sha256":"1e2b4b74380232ab613c5bc8480b93b46d83be8dc54baa438c88c847e6e8f593","sha512":"b7c1804bae47525085cf12a259e45a8a35597dc67c8345ea6a91a567ab9d24235136035e183b572e981d9c204b012b40f47b44c6694ac7a49d802cc7f5c7c350","ssdeep":"","tlshash":"34c08cc4a0c22d001602681411af64e49035402670481b028d98d8492e220b48233ed8","size":139,"data":"","first_seen":"2026-02-27T20:02:39.572941Z","last_seen":"2026-10-09T16:50:47.331782Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"615681ef66dbffdf373c1a6b5effdc22","sha1":"89cae045eb2fa301064355238e974e8d0aae8e7f","sha256":"aa70ef62c9eabb793b3cd7702c1a416637ef3071b3cbfdab91bcf8476294831d","sha512":"e24c00749ea140c17417e0c718d5af6fae450f54fd35270c4e1eaf3752d2639ca1450c8994b5fc0ea7d20820f4b3cd8ce2ad30765dfa7b5bb4ad2bffe6307afb","ssdeep":"","tlshash":"0dc08cc5a0d72d001602641410bf39e49064402bb08c2b538c98dc993e620b08237ed8","size":145,"data":"","first_seen":"2026-09-25T14:02:37.293291Z","last_seen":"2026-10-09T16:49:36.068552Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"329adae6a8f3eb9685c8ba7d736baa65","sha1":"17d220260175621602d70e712dbe206750e247e7","sha256":"d63746ee4d8c54200093a63d6e986a1518955135376a8e2c612b5b49e2b8b488","sha512":"bd4f3b723c3d8e7500d67b887c8f5da5ab508ef08fe985c4746706b26cd4c22ff45796bde606f80aef652f91320d67600af2444275b9a7208abd6271491cbeb6","ssdeep":"","tlshash":"42c08cc5b0c26d002a0ba92456af38e8a024446670486b22ddd8dc9a2e330b09333fe8","size":153,"data":"","first_seen":"2026-09-25T14:02:37.30318Z","last_seen":"2026-10-09T16:49:36.136389Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ab7e35743da442ddadcb46edcb200de7","sha1":"12c3c00702e09a30ffba29c62c772115f3512dd8","sha256":"ebfff208029cb855bd2475abb6a9c0ea185b3139c664e4c9019f70bac60c1700","sha512":"479568ef08a16bedb7ea7358895090a3bc0f9d8ad2c6b4e1ca93468ff6b1bd3c4f4a2da5b3261c0370ab20131e021f504b86afbb599b681af5c74a41ba92fa1d","ssdeep":"","tlshash":"fac08ccab2d72d005602a42121ff28e89034482bb8881b168d94e8993f620b88237ee8","size":151,"data":"","first_seen":"2026-06-29T14:59:36.749322Z","last_seen":"2026-10-09T16:50:47.318497Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"acb193f7db138febcd699f5c893d1df6","sha1":"9444256c1a8a5a93d10575635943ed55966aa0b7","sha256":"7f779745189a6f52b012fcd28806409161013c157a5286e60d2fd6a93aba4600","sha512":"292c4b86bdd2999eeb094c680430eb1c891a56cba904289bbd366bd6dd585e478ba689bfbd27637c6a8bc2e39ac022d2ad67d21de988a741b09aaab1aa13dbc9","ssdeep":"","tlshash":"5ac08cc5a0c22d002602641010af35e890244026b4481b028ca4d8493e224f08233e98","size":139,"data":"","first_seen":"2024-09-28T14:04:05Z","last_seen":"2026-10-09T16:50:47.285641Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b31a6db0e16446c99783b92ac5390b45","sha1":"48865922a16554197fbf342f6122a5bab59a2fcb","sha256":"17587338f90c822bce8306c0264c59dda34d59998681642538f5434431042844","sha512":"5343b4f48333b1bb9dc8e9513488c6f397d095e7c31da546ce3d848e020a506a16d74fd4a2ae7a4164a4bc5188adb0a4f3f05fd1afd5c5b7ed4dfe7766d89c25","ssdeep":"","tlshash":"8ec08ccdb0c26d105606a63890bf36e490248867b84d6b42dce4e8492e630f89233eac","size":154,"data":"","first_seen":"2026-06-29T14:59:36.703562Z","last_seen":"2026-10-09T16:50:47.269957Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/assets/index-B1i1_QXO.js","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29e0e7a143c3ed0541cb6e6940a46375","sha1":"580cd9ceabc96c13523e6c4e72d33aec176733d3","sha256":"fdfef70f6caaa359d55dacae5885d041775a07958508948d38cc41bcf6567d22","sha512":"a1619315272b8078d41928a2e8ed7af4fd22c1e73991446e2661e86c379ba2228e3b855784e022ad407b32de5f7104a064c8a7648f8ee7b61f5bfa6d1c383609","ssdeep":"49152:t2s0r+wVt4sZq9k0WPXRjX0QD1Y8i5B9rnu43czHkqENvYLybFhaV1CUKVwqjEcP:cyg4ueb0O4NhGB","tlshash":"8c265b80f556a439e3f79494506a0101721c7f9ae008c4e5f1fdcda62ba7da4a3abf3d","size":4850274,"data":"","first_seen":"2026-10-03T11:59:34.196538Z","last_seen":"2026-10-09T16:49:36.127917Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9fbf750d62a3b08c9a450caf99704cb0","sha1":"fe354f97b42dc2aac4207bea8177e9536ed31755","sha256":"19bf92b6fd7b32b25853b11b14478a05ab4ed1d40a095fdead863303e3f37338","sha512":"7ce0eb2d3428dc1914aa9099667096c5ebaa2bd95cf4699d0aa32f1185f74fe4975e116cb5a74322cf148a313362c994d27ec20420e1bde7589b03fd713ae58b","ssdeep":"","tlshash":"afc08ce8a0d26d101a02641814af2ae490348026708c1b128c94e89a2e220b08237e98","size":145,"data":"","first_seen":"2026-06-29T14:59:36.688617Z","last_seen":"2026-10-09T16:50:47.335023Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7cde99b5648a6ee964faed8a0f302820","sha1":"f09e6949f014d7ade929055b10533acaa64fb085","sha256":"783b38d9258a6ed7dfd391203a57361bfffe5d0e77958575f27626a7438a7dfb","sha512":"3fa1fb635d065901a4ea9228d712bb563fd124c7490cf3a5deee21b24207490c37d4e53656d4d46120c6855cb9213ca38a0833bac371284528c936e9d2ee42ad","ssdeep":"","tlshash":"c8c08cc5a0c22d009a12641120bf28e89024406a74482ba2cc94dc492e630b09237ed8","size":145,"data":"","first_seen":"2024-08-20T21:28:40.427216Z","last_seen":"2026-10-09T16:49:36.128869Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c6b17f07791b6b9b07e7e4126909c5df","sha1":"999512f288f4dce84f8e2a6e5ade3046a1131306","sha256":"d94df47fa00c602ef064169f98f72e90d9bfd01d24d41393fee5ad9aea08eff4","sha512":"30a1fd53400274f0fa37ab468053980466228b6682853c43b3e670bf01f228071219f063f6679dc0e9908970f86ca7b998d611f229156460ff1eb87576ad9780","ssdeep":"","tlshash":"7dc08cc8a0c23d00661665a491af29e490294427b44c1b028c98d8483e220f48233eb8","size":145,"data":"","first_seen":"2026-02-27T20:02:39.568049Z","last_seen":"2026-10-09T16:50:47.333415Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"be1129bf17f23df00ef0b1b334234833","sha1":"1c495b8769c36c8aa0364672dff5caf11fa832a6","sha256":"a412946665c9d8a8aa0a78afeee531ede77a74edf7b0157aa8a158eba922d5d9","sha512":"513f3b89d3d61dca4db5d1db2f290f7a7307872e72a1f631868f5e09bfcaa0ffb26518ac63b50c7a760ac9fb3fc34e9ca3647d16778dd5925240a8747336dbf5","ssdeep":"","tlshash":"9fd023cc70c659002506b51016af11d8d4388437754c1703cc9cd4452e160f48133e59","size":199,"data":"","first_seen":"2026-09-25T14:02:37.419443Z","last_seen":"2026-10-09T16:49:36.109934Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0396cf8ef7677382717f5e17fec6d5c8","sha1":"6a734d631dfd7381984be663f040bfc18fc1783a","sha256":"5d385130193ca833a15093578bb9ebf69c4e2580dbe0ee0a891360e22dabc97f","sha512":"d5c51cfd3a3e7a27a5fcd1dbfeae200bf7ade188b15697d72e26054e334dc6a67ca17ea96d2c96bf051a9e31519faef075d0a5ed86c575305d22516760b1695b","ssdeep":"","tlshash":"f9c08cdaf0c72d001612641050af28e49024442ab08c1b168c94d8583e220b08237ea8","size":145,"data":"","first_seen":"2026-09-25T14:02:37.390446Z","last_seen":"2026-10-09T16:49:36.116488Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dadb543168ead49104bfdbd9a6792ec","sha1":"e107d310f08d785f513df33c57ffd4d5ee9eb38b","sha256":"180bebe289c59cf98a27430d0753a1a50170d40e40524b05c8373160a8696d59","sha512":"ea2db13466c34612bc7f01196882e037fffba5b487a7e1c492eddf2777c6462436a709998f3791b24d952229ea01ef373d1cb9be44a94affab73e92f59ed170c","ssdeep":"","tlshash":"ea311499b9b1b431779508f660bfc58bb5723562380dc000d98fec95b92ce60d632e59","size":1673,"data":"","first_seen":"2026-09-18T05:08:27.365418Z","last_seen":"2026-10-09T17:50:40.746932Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BXdNs9wM.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8503ba82b08b8c99837696a4a0031884","sha1":"43f5c5d00871958d73f78fb61f13317b7e1ce82c","sha256":"532d7c0a97bd72cfcf575b2f5bca87cc519773edc46cd25b7d148edca988bdec","sha512":"aeb3fe11bc6dc994a9f4567e73512b14bdabb63c213ef28002d52e6aa86ccc981f460f4e8ced55a94949b293dc66194dfa7d630a0a711722e7f345f4c473b1a7","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDm:fWYmahMqBDDAx/LANwntDm","tlshash":"757319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","size":79629,"data":"","first_seen":"2026-09-23T21:06:49.600983Z","last_seen":"2026-10-09T17:50:40.74978Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","size":109345,"data":"","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-10-09T17:50:40.81561Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6c432749cd0056a025665a187da2862f","sha1":"9217f73f2da305036bd0fffca8b6c2192b1d5f57","sha256":"19dae3e5f17f78602124f1d20363539d506845afe2102583c46660473a245cce","sha512":"412f63f537d1bf511cfb996f6402bdc705c3f87ffef25dcc877eaab1e5385d590fb838034134e90762debb61bb3e8dc6f565d0f9554ad47280cd411683e0d5a7","ssdeep":"","tlshash":"81c080c861c72d1095165425507f35d4d0245836f4485b138ef4d8542d630b59333dbc","size":157,"data":"","first_seen":"2026-09-25T14:02:37.355694Z","last_seen":"2026-10-09T16:49:36.103428Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"61f2a96daa6ac099e301eda4b7fc7680","sha1":"bbc471d7d7817375ea30d01e93e9bc3e73e22e73","sha256":"3c160ceea2890a70dfff54dc870a5548b4ad6b9205b481ad0a34df49041c9672","sha512":"a408ddb21d4a5f4f0dafc12d31e24133812b9da50c13fb5e09b1ef91ad0bbe078074bad4f78d01ad499071e20661a695fb31a646eff309a3665b114d79ce48cc","ssdeep":"","tlshash":"57d0a78cb2d328112641945191af38d88014ad37f4497b158e78d8693ea60789223d78","size":226,"data":"","first_seen":"2026-09-25T14:02:37.307743Z","last_seen":"2026-10-09T16:49:36.099228Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"10bce465aacaa235794d497a1ab6230d","sha1":"ed36cf9c74dc3398884579287e84811156bf1129","sha256":"5380d4ee48090627f966585b41d6976c053f3941bdd8c638137e183d9e50e54b","sha512":"30a135637cc0a084261d341dd9b39c187df6ec84c5a9662e7e26be8ffb39a8711d06e3618830c4a39f487643d9a2e45cb0e3d3d43d88d070c06cfbcd11244a23","ssdeep":"","tlshash":"7fc08cc4a0d23d002602653114af28e490244426704c1b028ca4d8482e220b08233e98","size":139,"data":"","first_seen":"2026-02-27T20:02:39.553842Z","last_seen":"2026-10-09T16:50:47.329402Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2499a7e940a765182eefe4b17d36f579","sha1":"401db4307f1bcdee91f0ae007f6712c5bb70fbfd","sha256":"470c25a13df1a83e7a4b41d154e2c98320e961dd2733b3e71462d4687d921c5e","sha512":"ab83900a84bc51be96d918ddc0d3cb535a18ee29c28116c1114284dde8fe4e4e3f3a8cf50bd221458a3c7b178075c6af14b27cfc2080bfd546cf57554d98ab6a","ssdeep":"","tlshash":"8fc08cc8a0c22d002a02655210af24e8a024402a70481b02cd98d8482e220b48237e9c","size":139,"data":"","first_seen":"2026-02-27T20:02:39.586923Z","last_seen":"2026-10-09T16:50:47.348122Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"824263b41b4f332f82f6fa6926e09483","sha1":"93079c847725d2a9d67685872928d9b973ec467a","sha256":"2aee16bfe8ce92e50d7803de77378ce2603780abb747ec039d511784f02ca4ca","sha512":"6c217611a3aef4a44af1ebf9e5055e1589b470d5d6f8642f7b8bed12e0efbfdc1b2c43712139b78ede8d3c474f1aec79bf546059cc0517d76fa0976248297565","ssdeep":"","tlshash":"80c08cc9a0c22e106a02a56524af24e890288026704c5b42dcd8dc982e220b09233e98","size":145,"data":"","first_seen":"2026-06-29T01:25:24.943742Z","last_seen":"2026-10-09T16:49:36.090497Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eb4b493d6df4eefab6158dddfb7a6e6d","sha1":"5758fdc2c69fa521f503e660741e68620d523250","sha256":"829ce1e671652084c54d013c37e63bce639176073894bd3e0063901cd0f30c1d","sha512":"d1580890d1a35e4a0a22a84d17a9800eb66c4369b3fa00cb9716f13c64a6428d31ff938366f705d1d0826edf8e41f007d92927422e5c3c3af6e4d8b9cd4bfc72","ssdeep":"","tlshash":"bac08ccca0d32d209a06a42464efb5e89024442a749c5b028c94d8483e220f89233eb8","size":154,"data":"","first_seen":"2026-09-25T14:02:37.289013Z","last_seen":"2026-10-09T16:49:36.091596Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e066bab3c91ddb85428ec21cfa1fe623","sha1":"b40ec4b27635b8eaf597e5136b2555271c114b62","sha256":"d63792497d91dbb9ca926e01ff36b040a25e654844d5f92807ef38e51749764c","sha512":"31e0a5f8265e0798a354d552cae92068b5a3253d71b0f8c961fdebf1c7b62e70131feea342937963c5456bf67bfe17bbd5ea9f40ffa1f9678d62aec3ef1b2aef","ssdeep":"","tlshash":"9bc08cc4b1c63d001602652010af28e49024402ab0481b029c94d88c3e220b08233e98","size":139,"data":"","first_seen":"2024-08-20T17:29:46.828555Z","last_seen":"2026-10-09T16:49:36.054455Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d39aacf8e8d29e332e87b8bfaa18085a","sha1":"caefb57c7ffb8fed37f499cdebc0d2f0dc0e099d","sha256":"8a9807c00735f810d6b0f0c1fda637ac584d72b0d5dbc474041b1c40486025d6","sha512":"3ca513ad1e4524b98549126be4caa6b394c73223386b620639dceac2dc633300bc27d6717ef1f4cf32de33438acbf49e1ca1c5b53f16793e1cebda6bc25c5ddb","ssdeep":"","tlshash":"27c08cc4b0c23e001606682060bf38e4d024882774881b228c9ce8492e220b0d233e9c","size":148,"data":"","first_seen":"2026-02-27T20:02:39.5485Z","last_seen":"2026-10-09T16:50:47.264849Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4bc051730aba018fafc50f65e4f18fe4","sha1":"8b23daaf67b477f46b0fba59d68aa21fb55a934b","sha256":"d0bb81969da0144251f242a54e75ca342ba018998e889d5e748bcad95b8c8275","sha512":"236e56c7b5290bcee2314ab46ed8c7b516ef0649899518989c8c317834e3d5e8c458840c3d05a1d53f211a30bf7b89a59a44295a7e6e6020dd9ec1b8ddd65d8f","ssdeep":"","tlshash":"eac08cc8a0c27d006616642010af28e490244426b04c1b028d95dc883e220b48233e98","size":138,"data":"","first_seen":"2026-02-27T20:02:39.56889Z","last_seen":"2026-10-09T16:50:47.326869Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b362493ef837cb94a8605489ffc4ca5c","sha1":"f661da81ac537b07ad495575a55aa366e910bf61","sha256":"373b0dcc1bc98be74ba2e03a359e5fdae515dcb87e9a86278b9faeb8d0718b35","sha512":"b33061923f292686d625647f825ffeeb41eef4b75ac9bf106472406bce10c091d316873e01f9f7bae8326fa02444eab1091efdd93cf3b8bd4cc0ffde3748019f","ssdeep":"","tlshash":"f1c08cc8a0d23d105a02646055bf39e4d0289826b4482b579d9cd8882e620b4c233e98","size":148,"data":"","first_seen":"2026-09-25T14:02:37.311416Z","last_seen":"2026-10-09T16:49:36.069096Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"326e2e88920d0f5778bb20ab14d1a237","sha1":"607dc53c102697ed4dc257fd599c47551509ece7","sha256":"a06cc45cef5104a7fb3135cab70d329ebfdfd8cf9ce5c1185f5d860d5708fe87","sha512":"58a8b772ba7aacac73638385a6604ef44f8728a2599a1bfd8cb142e693b5c548dc8bba5e99a2d0d361821eae9a8751be21e8de2c5ec81d22db3eaab03656dc76","ssdeep":"","tlshash":"66c012c8a0c67d469657547255af36e460245427f5483b128c9cd8492d630bcd62bd99","size":188,"data":"","first_seen":"2026-09-25T14:02:37.285008Z","last_seen":"2026-10-09T16:49:36.049929Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ebfc16226633544103289cea414bf712","sha1":"482322db22088a093a94f2a11ee26c408f114b73","sha256":"ae4d6c46793bda14a83145864944ee66d8370dcc0416f0344036fd945342c349","sha512":"0ade2fef4a734800bb6f724c9251d2413335070a4f994c91371d9e45d3c70845071fceff1442e0f48eeaad321248877965d1d09c08938047a967563b53aced1a","ssdeep":"","tlshash":"37c08cc9a0d62d001602649055af25e49038402670481b228ca8d8593e260f09237e98","size":139,"data":"","first_seen":"2023-04-16T09:00:43Z","last_seen":"2026-10-09T16:49:36.107277Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ede15ec9c8d7adf6e3fd312e50fa1d2d","sha1":"fd3c4182bc490c3806319ed92a30d03a23760730","sha256":"71e0c60ee442868122b10e041436b20d1fdf56025ba7eff9355e0a43d61523f3","sha512":"11522b2fbcf40215975f8b9ee21c16a3239b231134e567d56e3fe18fe018edc8a774406cc578ae1b64ef13d65630c4f3ba005584c035f5ffa452c6c714481555","ssdeep":"","tlshash":"ece0f1dc83c12a1459026533145e304d70149c6aa10d27468cfed19c2e303bcc122e74","size":373,"data":"","first_seen":"2026-09-25T14:02:37.283317Z","last_seen":"2026-10-09T16:49:36.077957Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"52f84afea46a64bd06a7c7243c6564e0","sha1":"3b90684aea81162a65dd13a0be1dc994deabb6ae","sha256":"6cfc34ea165626f71a5b5d12ec12042cf98890ff89f60f6fa39fb1341c3bb3cb","sha512":"2b78f216dddb6fffc70834db193881b375a945383c9128421b3b2143933d45c2bb7021ab550acc001c7a065b2d3f65c14d65351e613db11dcd5f6d98de20e6d0","ssdeep":"","tlshash":"efd0c2ccf2862d200545a56411ee35e490294c93f09c371698ac98812e532fcd12feb8","size":283,"data":"","first_seen":"2026-09-25T14:02:37.2874Z","last_seen":"2026-10-09T16:49:36.114696Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5ffcb6d5d48af9a5ad82c49250831a03","sha1":"df3e6f5035052895635fe7f764aa9966fe9717e1","sha256":"b0c88315a6c50cbf42f9107becfa8adc0d23338f2ccd2e2ac2db6d8040efcc2d","sha512":"7875e75f67f8922c8078c45f0637c1c3d6fbcd95b1f5d1eef931fbdf739d996588273b4f2d1665dfcef4c37cdd531df7d491e2fe551e42c27e7c37540b1cf3e3","ssdeep":"","tlshash":"ddc08cc8f0c32d005602646858af25e490384426b4c82b028cd4d8893e220f8823bee8","size":151,"data":"","first_seen":"2026-06-29T14:59:36.729772Z","last_seen":"2026-10-09T16:50:47.291462Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ffbfa3e94d003102bfc370e460a04ac","sha1":"def8b68eb71d2beb67ee07383881e07a6725f984","sha256":"fc117d6e021190e8540d813c3b7bf616eeeec83a05b5756b534e5a00395a114f","sha512":"a7f6e3fec9264abaeab9f5676250b0ed105d459ab76ad080f9693844463335457e56899a0e85e97f7c00957cf3962d6219ee6f407d31bf37fedc09b9ba1f5012","ssdeep":"","tlshash":"dcc08cc4b0c62d202646641010af24e4a0244027f08c6b128c98dc683e220b48237e9c","size":145,"data":"","first_seen":"2026-02-27T20:02:39.549244Z","last_seen":"2026-10-09T16:50:47.327693Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3c45853c4f479c7a4b44ba66c17f970c","sha1":"12478a6bc1fbe391e8fc3f7b78a2705fe4de250d","sha256":"d97d650fc3b1cf68dc191d931967352f327e38b557574c49ec20e3b93f04c06f","sha512":"0c1a0748d3847f309126a4265a358b68dce4c548b8fe933e3f8d9b3ebb0b9a107e8e3f4693dc9a0bb088a0ba8731ceebffb4a44a3c841d9696335bf04bae3805","ssdeep":"","tlshash":"81c08cc5b0d32d409e02645110bf28e49024802b70482b02ccd8dc993e220f49233fe8","size":148,"data":"","first_seen":"2026-08-10T18:26:08.937555Z","last_seen":"2026-10-09T16:49:36.149356Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bd40246fddb8ba5599b2661015d92992","sha1":"644eb1c408e01a39c2098fa894987f6f875e7f5f","sha256":"de783d77c9aecfbc688cb3c71bf8060095a53aad9ec154796f83ea5e1d584d98","sha512":"9d0138b6f7f30d26264d6abcd5ef7cc54ee1ceda110cecfcc49c0b9b174103cc5fd4fcd11108d1c0bae83852c5b677f43a58a658cc546a44a485dbdbe6a2eee3","ssdeep":"","tlshash":"5ac022c8e0c2b82182011461a2ef62e4c028402b30885b12cceec8943db22b0d223fbc","size":190,"data":"","first_seen":"2026-09-25T14:02:37.330519Z","last_seen":"2026-10-09T16:49:36.087335Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"96461edc04536de86652e546e23c34d1","sha1":"6e6ec0c9677412f1daaf23e25958a5f67b8e681b","sha256":"39b68b3d14041eb1f61361d5de5e30b7b8cda9152bb240e64c92db4ca214aebd","sha512":"e7dfd46979ca741daf5203a7fb35ab72933333eaf29ecf0c23686e144d53431effa13fd954ece58d465dceb600d722d16f4d07de65c214937ca5deefa3f507b0","ssdeep":"","tlshash":"f9c08ccca0c26d209a02a42450af35e8e024442a78889b028cd8d8482e220f88233ee8","size":145,"data":"","first_seen":"2025-07-12T20:24:33.305799Z","last_seen":"2026-10-09T16:50:47.395501Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2b044090047429b0d303160de6a5c28","sha1":"68682f0b0598a1a38df622a8b695a94f9ddf8fa8","sha256":"7749e8181feee1fef89bbc35234ed0b8d5ae55dfe2664f62349de09ec4b8ed81","sha512":"61c13a930fb628572de95014474d7565d28f2976e8c828ef970e50fac2892384b54ea43051e9736bb418c5664b6ae66b919966e44a65fc8ec014d76d9c778e03","ssdeep":"","tlshash":"2ac08ccdb0d23d001606a42220ff28e89034482bb8891b52ddd4d8493f620b88237ee8","size":151,"data":"","first_seen":"2026-09-25T14:02:37.368933Z","last_seen":"2026-10-09T16:49:36.118897Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0dd5acb9668b8a46c54a2d5d0675f95f","sha1":"0f65853b91abc1def678561d41195c79aa7a5f54","sha256":"25e2c070c31fc70c7299ec2a37b8ed19630eb1f72a14c92d1cfe0e697557295c","sha512":"d7d1211dff4b7af4603cbccf150ed417cce29c161847abaf084351720e3e1ce0f8ba36247ddedb3de1b13a805f292d6f7287d1368e2ffedf1c60f609ffb019f3","ssdeep":"","tlshash":"4cc02bc4b0c33d001602651011bf34e8a0344027b04c1b03cdd4dc583e230f08233edc","size":139,"data":"","first_seen":"2025-07-17T12:55:59.39321Z","last_seen":"2026-10-09T16:50:47.346411Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","size":19114,"data":"","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-10-09T17:50:40.753631Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6009a6214a9410699783eda2ce6807f9","sha1":"999624560cc66c6112ecb32a6c196ac01b89306b","sha256":"722b44073ddf51c1106d7257667ce7c934e809925d6cde4ac22a2ce17e6f4c01","sha512":"3306cb6e5bb887968739270052af0dab84de10512eeb59b2d0f514e592806f364604dffe3cfca7a2bc437f303fd9e2d8b4b2b47a442b3d478fff7cccd0ac2cd2","ssdeep":"","tlshash":"70c080ccf0c66e507556552051bf75d4d0384c1774481b139d94d8553d120b45237dfc","size":154,"data":"","first_seen":"2026-09-25T14:02:37.417574Z","last_seen":"2026-10-09T16:49:36.069718Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a3458d813b85fb19c82396dfff13ebf8","sha1":"d845feae188a1c846cab50ded30d89438daf6db9","sha256":"2012935e3bd7ed881a4d5e6551ca4fd65e2fea5190eec226faad2c97c67ead70","sha512":"019f7e1f656714fb57f525782194352c5e35333002e6e4a9ef547716489ef5d32c86658d590286d750a73902a0c8c3151c41a513230b72a31798bd3b25176eee","ssdeep":"","tlshash":"dbe026cc72da3a5456096941946f2694801c0c23e0b96b1258afcc917c71bf8922afb8","size":328,"data":"","first_seen":"2026-09-25T14:02:37.367551Z","last_seen":"2026-10-09T16:49:36.086298Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0488957307715e97a337c8dbcb2308c","sha1":"0c0ce41608466e76d6b0ca6bbc17e4cfc8a4d135","sha256":"b02b59c79ebec460fd6eadb823743d18ff7824d5e8c411985fbd6b190256716f","sha512":"320c05a17c33e00725d7f13a45092e1b6cc5d21c17803944138fae3d8af40cb6b86e845b6546716bb5a0c9361dee48dc63a5897fc003140dcdee771883339a71","ssdeep":"","tlshash":"ecc08cc4a0c62d00261a651150af34e89034803a74886b028da4e8682e260b08233ea8","size":148,"data":"","first_seen":"2026-09-25T14:02:37.35745Z","last_seen":"2026-10-09T16:49:36.064185Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"47d32b6f90c9fca6ef0773ccf5968ee5","sha1":"5a590468cac81d7b7b292c286efe73277b40943e","sha256":"995af2821808904112613f83fc793600b2083edaef42531faa6d558a21268845","sha512":"727794295946b4f1da44bca36fa415e61e4ae0e042c745d3a408547c38462004e190e0123e58832f4dd4df3007c7d2693d98d4fb6189dd907d3fd93b50ae9afd","ssdeep":"","tlshash":"fcc08cc8a0c22d005606a43454af36e8d024482ab4482b028c94d8583f230f48237e98","size":142,"data":"","first_seen":"2026-08-10T18:26:08.935778Z","last_seen":"2026-10-09T16:49:36.155591Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1b2e078bb98c8491bfa127231ca10d","sha1":"bbd97bcf66b0d7596bee0beec00a56785453b45c","sha256":"c9273b5f7cd24acc4baaced09c8a97f5c95efb4cd49ef89f57b5e61e60b344f6","sha512":"18624672bbe39dc47021d0b74632355486130411cc5ef6ad0f7aac1dc5e19594747d88c524da3eb0d30a59b2a1c69c342ba78fbac50399a405da2b5ee6bbff0c","ssdeep":"","tlshash":"87c08cc8a0c26d005a1a64a051af25e4d0294027b48c1b128c98d8482e220f08233eac","size":142,"data":"","first_seen":"2025-12-24T02:36:23.782557Z","last_seen":"2026-10-09T16:49:36.119634Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"09799c9682458910cec14619e4abfba3","sha1":"de2acb9279c38b5373f9716448a8a75887e533a6","sha256":"e27488c3dc4207140bc14730594327d7c8679aea12d3a4b0f30c6018cd0cfa74","sha512":"83935da69597187cc31a496acf32067946689665e2163741eca0eb9bf8d8e80347b0b637243d1a32ce0474fe37984d7ec54c739bb42cc032064e0bacebbf463d","ssdeep":"","tlshash":"77c08cc5a0c23d101602652550af29e490284436704c1b028ca4ec482e2a4b49237e98","size":148,"data":"","first_seen":"2026-09-25T14:02:37.306324Z","last_seen":"2026-10-09T16:49:36.098519Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"53d62585519057ae9121e0d55481c615","sha1":"ffe48b698ed1f63c28928eead6ff7460425ba526","sha256":"4386c8a5527ec4cec8e1c281d9f1f5ceddbdebbf814ead200862b2a722de1703","sha512":"39ee230e2e0a8b8dbc4c9c9a230f812c9c6a15bba0af89c3b7d3f11b54a8e463dace30c284b8fd7f9b8c8526ad56ddda08c3a850e56de153f32724aba4f7c8d5","ssdeep":"","tlshash":"bdc08cc4b0e27d4056066824a1af2ae49028442674485b038da8e86a2e222f49233ee8","size":148,"data":"","first_seen":"2023-11-29T07:46:56Z","last_seen":"2026-10-09T16:50:47.283298Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e396994e3222dfe8f3c5b178ff99793b","sha1":"479b11fe726b5124aaccff3782e795ea2fd96fa4","sha256":"1edf887d2000cd03f2b33ee3fca65789f6e248d78d1aa284aa452fd3d20e5daf","sha512":"81c80a61040f0239cca3069e74622cad679b1000872a67dafe71877ba42edb3ce54155c5bddbdb96389bfb3df480f4454fb31f22b0e9ef132fc2808d3b4b3466","ssdeep":"","tlshash":"81c08cc4a0c63d201a02681152af69e8a028402671481b03cda8d8592e220b88233e98","size":145,"data":"","first_seen":"2026-02-03T18:07:01.360984Z","last_seen":"2026-10-09T16:50:47.27957Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/charting_library/charting_library.min.js","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"234cfe0087e52703b5600c3ac708bf16","sha1":"88a6aae1de2a345610f5eed535749df2709badf4","sha256":"b560abee96cea6274a84460c61016941151ae1fd8c9f9f117333cdd2532f69c7","sha512":"64dd694ffcd9bc94681a9c2476f59d21af838df2fd3c36ed0a0e7b994c638c9c54179f01e6c1fbbc3e7b087e35a6e6a987f805f1c8611a4088ec703157beecb0","ssdeep":"192:w0+5tO8F1+r74rD0w1p3QbhVj5Cix+/Zich3OQj5jYB5ql6KMIp4OMCLIpMBCKkp:0R634FgVjnx+xVF5ja8jpjIpPKkp","tlshash":"cd62bb1adeb9283105d770f4896b140b6535922f98869d483ccd83dc0fad46e66bafbc","size":15677,"data":"","first_seen":"2025-08-02T08:37:54.349275Z","last_seen":"2026-10-09T17:22:19.329019Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"220d6d509e897ee5012acfc88bdf3d87","sha1":"770100a6a31e2cead3b5cf83ce35641ad646b4eb","sha256":"16d5b737d6c92c10c5e973c5924f27fa6b752d68eb4be052fc5523b3f2e4649f","sha512":"9fa27c6b0fdb06bb69e3671402a866cb92ebf4898d828fd6fa550a77704be74a5b0cb4ba586c441d77a3b42549025f6c75ba19e70ae4d76f708ddaca418767a4","ssdeep":"","tlshash":"5ec080c560c32d1056155534506f35d8d0244c26f44837028da4dc542e530b55237d9c","size":151,"data":"","first_seen":"2026-09-25T14:02:37.286359Z","last_seen":"2026-10-09T16:49:36.118303Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"53a0e51be2e98396868b4e71ed47ec97","sha1":"734d54355c0bdf95af14dfcd64c6848b9c99f70e","sha256":"6eeb6e77bee6bd4f9c31d1902e97ed263d6aac463710122ba80d57af11197d63","sha512":"18d64fb15cf5f97838593d69cecb77b9e9407854633717a1658190c74aa4dd75b69965f16649c29a7c391a65aa32ff54379ee4f553dcb0a7f2bc41714ad41242","ssdeep":"","tlshash":"5fc08ccce0c62e407a06682451bf65e89038482a74881b029c94d8893e220f89237ee8","size":145,"data":"","first_seen":"2023-07-07T23:43:46Z","last_seen":"2026-10-09T16:50:47.312216Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b2c4e14f342159c6696d4217fe2a0390","sha1":"6ee74bc1326c7302c53f33f5b1721944153de130","sha256":"cbb05e82820ceed60e1fdf8a855ee782ca4af3d7c099d3c87c0bd506340ce9e7","sha512":"b479a25f7af0100c68eda2029b3cb694c3cc349700d40060efa6ff3be162fe7ea1dacc0455f1dd8887f9ce722f720d293e12a84e6ebc3f8e57eadda14a539d1c","ssdeep":"","tlshash":"9bc08cc5b0c23d005a12685410ef26e49028402b70482b238c98dc982f220b4823fea8","size":145,"data":"","first_seen":"2026-09-25T14:02:37.363054Z","last_seen":"2026-10-09T16:49:36.094139Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/#/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"12a98e69abb3711868ea8a70f6a5f138","sha1":"6ebe5334a7981221e7efe1c6b6d90411ed154a21","sha256":"15f2bf5670c54129e32805171e96c2411f53def44fc40adbd6db9ab9f2fd5109","sha512":"3dcb0e0a57499bb2ee2e1f9d8ec7d60cfcced58c1eda5524082d80972eaa326422358cd8efed72f6171b0640c09f45c7475a647f718d73213444c2e5622eeae0","ssdeep":"","tlshash":"a6c08cc9a0c37d006a1a687254bf29e490248427b4481b038d94d8883e220f08233efc","size":148,"data":"","first_seen":"2026-09-25T14:15:59.562458Z","last_seen":"2026-10-09T16:49:36.12475Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","size":52936,"data":"","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-10-09T17:50:40.752898Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/XRP.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.859Z","timestamp":1791564382859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/XRP.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 953\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:41 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:28:04 GMT\r\netag: \"92f9d15be55070c0f267e7b9609211da\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: QRK6OD8vVyictvg2hsHVXOfI_qefjrI8\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 2rc3-GyskqaM0Oc2DLeaqeaf35ua3R2ucd0lbLvt8SucNd07-9HDAw==\r\nage: 14322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":953,"size_decoded":1601,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:24:31.112416Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/UNI.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.897Z","timestamp":1791564382897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/UNI.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2522\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:54 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:16:31 GMT\r\netag: \"7fc81e0767bd186634cb67865e4f338d\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: ZCM1dubRmeGU1Ls_o_P8LVnc0xI0v5jn\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: EscoXBUkWr2dlMN8aFOiBOj9lqmrcdy_-mIAISZsYYHjF8h6IBNKuA==\r\nage: 14308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2522,"size_decoded":3171,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"7fc81e0767bd186634cb67865e4f338d","sha1":"8368f2aef485e97eb32ec2170e2c4670b123c75f","sha256":"03f146f5adaba0d00564b1f3559d7a987356844a0969d7c901c7745d36f43039","sha512":"8699d8a576c60fb5429fd032e10778cfd12e20b15086c5894ca86bbeac766ef640994a2a73a8a0cc8d9df1b8e6d51274f95b3a8bcee2512171cc741594e89ae2","ssdeep":"","tlshash":"4d514cf41472b7f5195a6f536c90e75cfe890cad1030c1a27b930b702e6e995ace291d","first_seen":"2024-10-18T13:48:19.627179Z","last_seen":"2026-10-09T16:49:36.031962Z","times_seen":198,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getMt5Amount?coin=xau","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.902Z","timestamp":1791564382902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLRvoEUMd66ms9Jfm%2BJgYAelGP6XskXMiCWwndatsDIyuAkdDpkhs8hx2FD038SuQl8NlwjPpgg%2FLgPOS9I9pfaV%2BVm8OJFLUBBuGkAhQ8car8NFIP1MYSXW2hM3dIqUYw%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc7118f256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":713,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/MTL.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.361Z","timestamp":1791564383361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/MTL.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 17154\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:48:04 GMT\r\nlast-modified: Wed, 05 Feb 2025 09:25:43 GMT\r\netag: \"bf914fc41306c1bcd0eda8e60d4e8fa7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 7NI5L1joBdIh4Yi1LUdPHOoSc2oxDk3c\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: JJQM0rnGiRu3vLu2vid2IFWOgh7trgpjBEToUvLuR8aie6_gv8jP1w==\r\nvia: 1.1 3c74306cc732cac2927cc4e3489e1e72.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 14299\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17154,"size_decoded":17710,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"bf914fc41306c1bcd0eda8e60d4e8fa7","sha1":"79def7adac6679f608b1e8cd119a5243f312cab1","sha256":"1034a8fd3efd575c4583516fe28cedc21e4b05348e7cb1e5f6902165eb67f8b5","sha512":"207d3014defadf8ed468423a68ff968959c513145c3872056c5bf9d0b98e2b0408cc57df797fe9d88b22dddaee7403f8b0156f9a04624af731fe7d4ecd337e41","ssdeep":"384:jQvxoNQ3vbMrlYA9EOfyp0mzPT7jvIb+5GrjDR3Qlo6C7qNOLEn4rAu:PS3vghYAh60UP/kIG1gGWOLm4rT","tlshash":"2972d07c00ca8fe33d8a4616ccd779fa8d12de7880ff4561a6cb89a7581d509652937c","first_seen":"2025-08-02T08:37:54.430334Z","last_seen":"2026-10-09T17:15:27.927256Z","times_seen":65,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.722Z","timestamp":1791564383722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Wed, 30 Sep 2026 05:38:12 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 204cef356c70af67cb3d9dcefede21f6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: Z-H2Hhk4oSk5I0kajlnIqS5Q8Ajtl_C1jZ5P93oAKX8sa02uQRY9VA==\r\nage: 817692\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47223,"size_decoded":47882,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-10-09T17:50:40.796221Z","times_seen":3649,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":38,"connect":11,"send":0,"wait":13,"receive":11,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.771Z","timestamp":1791564383771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 15:59:12 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC90F50108AF53838511D7D\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17389672731008990191\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: QUYS0PYmdi3UBkqdEfghww==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: oSiuS66lK4JPAEFA-hRmO6xBqFtzlmUzRNxXTIjwPqVPqvCzE7_-5A==\r\nage: 2831\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":19114,"size_decoded":7682,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19113)","md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-10-09T17:50:40.753631Z","times_seen":531,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=3f6eb8575de4b87b70bf486e01ddf810\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385965\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:25.969Z","timestamp":1791564385969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/station/log?plugin_sign=3f6eb8575de4b87b70bf486e01ddf810\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385965\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 503\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=26b09fddc58b937ad10aca8435e7f46c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"26b09fddc58b937ad10aca8435e7f46c"}],"method":"POST","post_data":{"size":503,"data":"data=0qHafQ8hMhHKtTc8f5KWB9w403E8BQImPSDWyqFhBdHvP9a%2B1nkhMhHZtT%2BJfdmA0nzayh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyQIKsNcbtNIVfVzErdyiyAXVI9rvl9sjreIAl9l9relaIeO4M2D4s568leHAl9I%2Byh8hf3jar9V%2FN9VvyAKhr5uQsn%2BZMdypyQuAt3VWPhyiyGY%2Br9Xn1nXSyh8ht3zZrnkhMhHQlA6alAfSMeIhM2XAl2uhInO8s2tVlQySl2XVsQDjldypyGXErdyiyAy9sA6mrQcvs5DksAv5I9uvl2Y%2Bs9OkIelar2tQIerAyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:46:26 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47edc844f24120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":637,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0503862fd87dcf77b231c411f55b62f1","sha1":"3f966e676d6ec4eef0aae6e57cc147124dc21bff","sha256":"61ebcba759ec9067b4ff0e60c1ff331290d72a34f43c5165376dc08583eb5bd9","sha512":"6d9559a0654e8bedf97e4642c30a05385df1842f4850b46039bd63a0e578d0671e3c8f4ab8631726263472e05546b2ef4788a395acb798a2008e7246aaf45f11","ssdeep":"","tlshash":"deb02413143c43030d41550f40043700d55035d01d15473fdcfc4310531c047ff014d0","first_seen":"2026-10-09T16:49:35.124649Z","last_seen":"2026-10-09T16:49:35.124649Z","times_seen":1,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/hangqing.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.577Z","timestamp":1791564382577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/hangqing.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-7c32\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7Kps9Tm67jXzl%2BoNbBEOeuY8g0fPRx6829nGtpc3kUMEjUPb%2FoPrqJsYz2RslObPIZ8EXQZDRNlcy2eMQ%2BIqnGoVNen%2BzqzTb2RUcSc1a82P%2FeZRwl1mRyqsVJg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f1d3fb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31794\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31794,"size_decoded":32487,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"37caa6fcf8ea1ea04b98df323827a599","sha1":"43613067aa6e93797a97e31be4b70a7e9bc0bedc","sha256":"b2f4c3713ffcc73bc3322c445d4f885b16718b3c1c2422b6165cf03e232559e3","sha512":"3eeb0fae3c85c47ab528187ef1c9f385c0eeed01dfe540386864adb94f634b24b226e02ad8afcce67675377d5369e481e7ff00dbb8f7cb34006e9ab0edf9a68e","ssdeep":"768:OyR68Mv6DUPW/AVVsDO0sOHWbSn7EDYpB:Nwtv6DsWYVVsKU7aYpB","tlshash":"87e2e0dbf09d4263c88f9536b00b57ab7e9ea52f0b902ed46b34d56225136b8693c330","first_seen":"2026-03-05T18:43:11.176902Z","last_seen":"2026-10-09T16:49:36.024385Z","times_seen":21,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/platform/ktx/logo.png?1790751050655","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.743Z","timestamp":1791564382743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /platform/ktx/logo.png?1790751050655 HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-8e7\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qukGMVXegMKyr6BjIxzb1dMERUbp3SR%2BHADJgjDQAORj6MtYstCo3vCOHfxL63s%2BYwpdlB6HKeD6lk7U25lONrH2cx1NubiUlrZRo9YMhYPzX5SsFq62bCjboSjQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc701d7cb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2279,"size_decoded":2964,"mime_type":"image/png","magic":"PNG image data, 384 x 120, 8-bit/color RGBA, non-interlaced","md5":"cb3389b72130de0d1f5d5a038d52c3b3","sha1":"d5aa4fd44bcb320fac7dbff7379c635f14813f59","sha256":"5552b4037b9f8121302019c046b8cabfe93001d74787876911d353abad006b77","sha512":"ce642e604f77c5e50378340bed2572b48ab18e727c37a36a689b902e542876b306456e910d146134705f4474b651cd4966fcf7135858af6d845448a197b400d8","ssdeep":"","tlshash":"22414bf7cb8580b71f2686d4eb8c61b1f432f255419fa10a91ef88b58086fc8c42c0e2","first_seen":"2026-09-25T14:02:37.273812Z","last_seen":"2026-10-09T16:49:35.882306Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/assets/materialdesignicons-webfont-Dp5v-WZN.woff2?v=7.4.47","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.709Z","timestamp":1791564382709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /assets/materialdesignicons-webfont-Dp5v-WZN.woff2?v=7.4.47 HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ktxjp.cyou/assets/index-BoLUGZeU.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:51 GMT\r\npriority: u=3,i=?0\r\netag: \"6abcb14b-62710\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4geiLAlpMU8yL77auA3XisABJ99bpoZk%2FreEXDvvzGRHud4%2Bg2duRj9VvRuyVaVZjLQ3MJl1J4uCdRRvlwy9ZmgQm2x3eKdAuQqv1cdqwhBeb2EMgdooVk6HZxvE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6fed76b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 403216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403216,"size_decoded":403923,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 403216, version 1.0","md5":"1d7bcee1b302339c3b8db10214dc9ec6","sha1":"4e20f6ccf43199dea5c85b23a0e0f0ba81ffee26","sha256":"662fefa8f2f8a95c18588d21774789c107c64e771cbe65a69af46291c4311afc","sha512":"6c9b5097ac35698b84624f36f39847aff57b9edd115279cc62f88f024631a6d0f5bbfde22264b71a5169c4cb865f47c4aacba11cd91ab5a7f8ba43a42b840190","ssdeep":"12288:Y2qKg4wwAtPRHbF+tHN+kGU98Qk4p9Am3nVQ0Sd:Y2qKg1bt4FD4o9AmnVQv","tlshash":"31842318e2c5f30931e05ec24c3bbfb491304e63b7aadc9c74add71903a959a1ec7a95","first_seen":"2023-12-27T10:53:37Z","last_seen":"2026-10-09T17:05:11.97378Z","times_seen":5649,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/ADA.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.883Z","timestamp":1791564382883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/ADA.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1307\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:53 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:26:57 GMT\r\netag: \"4119a4119257947d75974ee50258b121\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: ViF05CBrBpXy847J_P6AeLzRjdHtr__U\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: kU2e_TTOxvHfxUtOhCFXOwGBIB0hLgPOCqqKxcqUjQsYWIknFjtH3g==\r\nage: 14308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1307,"size_decoded":1956,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4119a4119257947d75974ee50258b121","sha1":"3485b77d3dd2df3d105f88462a0baaa1f79b3e13","sha256":"689f4313c40e98326ad30bdd24ceb7bd273b32cc0c080ef1528d425937bdeb95","sha512":"6238658ee4380acdc610ca1786d13b3a0b8265a5e32514690547a0cd9d9db1fb940dde7c9170c71d5e887ae715fe6b4b85ca9712b216a0661deb749091c24d85","ssdeep":"","tlshash":"7f2186a6c2869b1fd97ba12a87e6c185ac972145a942235cf60448cd30a814cf9d165b","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-10-09T17:15:27.991313Z","times_seen":623,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getMt5Amount?coin=xpd","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.904Z","timestamp":1791564382904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zo4FO5cF5kWe%2BF%2B08OMilyzFD2O3ZmNqchxl7J0WpLqoD2as6VKCiGPbm7Bd0QohSINpWfHQu0E7GaZAWr96i5VLQ%2FBWAUfA36jqQ6o5Gqva3cRdGhvZs0VcTQIpkMZqUg%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc7118f456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":713,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-DxbZSAdd.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.844Z","timestamp":1791564383844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/plugin-DxbZSAdd.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 15:59:13 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC90F516590933030305A80\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9418835807800073087\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: ipyge+8IVWg/Z+vF+UszvA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: llyH_1jPMHePWAIEpXNYKtKGbfZhJJskr3PZerp4yGDY5Hm2_pCmdw==\r\nage: 2830\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":556891,"size_decoded":191560,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65426), with no line terminators","md5":"8a9ca07bef0855683f67ebc5f94b33bc","sha1":"37e8284c133ade3bdec668391ee8b20385cfc20f","sha256":"0fc0b16017c29483711acc09fbcb6712ed0f245312505f8c7edf11b2b260f6d9","sha512":"3ebd15f431213968cd73ed07936198a83f0f7e1d3655f7ae287451387e684bce10b8c9fdab1d29ad13d2eaed74522d9ab3aac34663fc5a44d2c2ce169c2085ac","ssdeep":"12288:CwV0Rw8Ztp1fn0rteSw/b/xpnfrPRTUvE26325KjHaDCGOLnNr/Ja3ehw/BDtj/o:eRLnhAt/g6+2hNMN","tlshash":"83c46c4df2a5783693f75490a0e60444626c0b6de00488f1f5bc9eb917b2da2e3b7b7d","first_seen":"2026-10-09T16:09:38.509986Z","last_seen":"2026-10-09T17:50:40.816258Z","times_seen":21,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/one1.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.353Z","timestamp":1791564383353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/one1.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-720\"\r\naccept-ranges: bytes\r\nage: 2401\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6NpdGJ3wpBhVGf4KN4g5tp4Chu%2B3BhVZRmJIL%2Bwb3EBsDCUNsx9bHWcVS4L7HZswcq1P7212d8ww%2F%2B7YIyD1J7WbWgP9Ha4XB3qI4vy9D%2BfhSv237Ux1j0F347k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc73ee11b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1824\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1824,"size_decoded":2515,"mime_type":"image/png","magic":"PNG image data, 41 x 52, 8-bit/color RGBA, non-interlaced","md5":"f450e93d2689b39201102e79f50719bd","sha1":"e241113920ec20927cc4936713fcc218dab124b8","sha256":"3c2b2233763b0b3500e92440dc2d7fcb98e1ae338b84e5eda38bfee8bc6cb2b6","sha512":"68ba2a1cd644bd192009580f27f49e7a4fc3829966dac2718fbff52b459b65da71bfd73896a474af29b1671e87af85ea7b799fc7bb07fc9845385eed57bfd151","ssdeep":"","tlshash":"dc310be7b557145aad1f2570492205fe84b3f6977852250b0191fc5579f8f8a70cc0e9","first_seen":"2026-02-01T00:50:34.409167Z","last_seen":"2026-10-09T16:49:35.880491Z","times_seen":22,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/jimeng.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.587Z","timestamp":1791564382587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/jimeng.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ktxjp.cyou/assets/index-BoLUGZeU.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-3955db\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8LvfW5YLeo2mkjZGzrr6f5jcslFa5KtnGgRykfxAu01hjgbHlKIaXJ0VtylL9jtvYW0KrdniVmvJ4t4jS8OWw3kayKp5%2Fdl7aeDWPGEHJBYGVg%2BmAea5g4qHoZfl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f2d44b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3757531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3757531,"size_decoded":3758222,"mime_type":"image/png","magic":"PNG image data, 1920 x 1081, 8-bit/color RGBA, non-interlaced","md5":"894ea23869e679618fe0531d79ab7b69","sha1":"6ce183e58a59b1c85cbfa8ec43024b881496d7ee","sha256":"f69d7fff6821a003069b2efa2271f106ee7e323c4e078e87e70ee5c25283f2b2","sha512":"8ac4fde2bac81636c32348d1c307793bc65ee85b734775fa34950bb7b27dade33b85d0d7b9383fab087fdd71fc012f0143e2144b05d72ea6830203948e4c915d","ssdeep":"24576:0AYzuogJvc+MfxXZA7xgKqBl859e1d5tG7kOWWX+gMo:0xuo/f5GxgNT8501d5RTo","tlshash":"8825333841648b03c12ffaa406f6af3ea5516e4b6ded95b64dc6957806382233f0d9cf","first_seen":"2026-03-05T18:43:11.194823Z","last_seen":"2026-10-09T16:49:35.994104Z","times_seen":21,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":555,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/user/getCountryCode","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.286Z","timestamp":1791564381286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /api/user/getCountryCode HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: \r\nlang: \r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gu8Dup4Kq%2BnHYTuTUYkOwD%2BYc8IJh2fZOsZ1cEdAR50sn4CqWS0kSxUNlULXCjspQEd%2Fz2osuiorz0eqF%2F%2BSFGW9mlSajEj0htMoPhZBb1kamxO3b%2BTxbT2Sy4z1NS6%2FIw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc6a1ff256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22018,"size_decoded":6264,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (20211), with no line terminators","md5":"ec520b3418b581b9b42e2cc0d95ab2bf","sha1":"58b482f8adfa2ae036d957b880fd0c0879944736","sha256":"b97120c2c7995a2b13bb06e5ebe79fbea4f97a04eadb63431f57d3b8a0f54ee1","sha512":"bfed4de1b10c5c8095d1363569674d0d8ab162d7ffe682811df3e173c4de42aad0bdb0f0575b267ad0b479509bc0fc495d89b64a71a8840d1ece8e76c0008778","ssdeep":"192:0N412kx/U7/cLVkL/GWJfQXvAYLB4lVDiZ6OU1L2cCDQHk3jnB8LWlAQnZU/6Eun:0NouXcvAz2Z6UFSy2WQ2gn1C","tlshash":"32a22f7e650cfd6dbf24a6e3a04b27390ab5b1bd06c85c1bd5cc9eb2f2d16a92431530","first_seen":"2025-09-21T22:51:26.860054Z","last_seen":"2026-10-09T17:15:28.003361Z","times_seen":134,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/assets/index-BoLUGZeU.css","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:19.951Z","timestamp":1791564379951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /assets/index-BoLUGZeU.css HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:20 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtWVaYY2r4Gjit9MtlJh7cTyR4qV9tzmEeacGSd7%2FT%2FBP17V%2B%2FJiJVCDpeAUMEIkzAEeytKB0HUYqEZqZklwv6VhxmPWWh6lowX7ejzeOgXdTRylCfGnsoGmyhYK\"}]}\r\nlast-modified: Wed, 30 Sep 2026 06:50:51 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6abcb14b-2b1dee\"\r\nage: 2405\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47edc5eba2eb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2825710,"size_decoded":365068,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c5faf045ad55f6e355bcc1dd304448fc","sha1":"258e8b53abf9ade944838997cb01327448e2ccc4","sha256":"fbb0a970d1b20d33e802ca2bf8400ec6552aa9d1ec8fa17eb5e2dcb260352de9","sha512":"7d972cd2e3042508ab0f8d79ae16e25cf19d1b2f9514aa6a539d3fc1a9f49a8dd43b4f7b7414de9faee8d5aab1a70cb4126ffd5ed39e88edd81a0858364dfbea","ssdeep":"24576:wthFwZ8w71ZACkFDS3vyf58rBeV05T4gl/I0:utC/I0","tlshash":"fb25093d761c2018a637d46265d4aecc5124f767c71341edf6933a2a8ecbb933ab1788","first_seen":"2026-10-03T11:59:34.125092Z","last_seen":"2026-10-09T16:49:35.985838Z","times_seen":5,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/USDC.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.868Z","timestamp":1791564382868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/USDC.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1390\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:24:09 GMT\r\netag: \"4a0e5e239b274e9ec4a17ac738ab46bb\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: LMAigT3VdSbYQlD0RdT_CyzcgN1amCKd\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: C-M1Yy0wK5mESDbO52srPnM27J6Kp_2CFcu714l1pJ5Wn9OxteJ6cg==\r\nage: 14322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":2039,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4a0e5e239b274e9ec4a17ac738ab46bb","sha1":"ba18ca71aeb54d5d2b3f197fdf2bb9b7ecbacab7","sha256":"1cb080bee7d509d8ec9e8eebbd89fd838c36fab0438dedf3d178158fff34eabe","sha512":"0b88ef9224480bde1211e74ee3c32dcb9f36b7dd185c1b22871aa8dee3581c04944964c867bc7c83fcc81337a2a78f0d86d40b2501fcb7e85e17a2b07cd2b826","ssdeep":"","tlshash":"f4210be3c3569f41f71e9ee6c1d809e61c24b441b02127529f05ba15dd2cbc4a6e2fc7","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T17:24:31.096124Z","times_seen":465,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/ZEC.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.889Z","timestamp":1791564382889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/ZEC.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1543\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:49 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:28:39 GMT\r\netag: \"41bece343010e668120550d4ae2aa14b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: Y3vK27kPlaxdHDezOKzbpbAyL9NT1b4I\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Vy1G6IbRLgZLVf24Ix7iLrMWpC2yQmzSFOHDn1zD9PKdXieR0L6-zg==\r\nage: 14314\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1543,"size_decoded":2192,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"41bece343010e668120550d4ae2aa14b","sha1":"ac0d49f6c3bc440bff3cde62ff6344ca23038ccf","sha256":"eef747ec1f7d594f80003a21812a0d500da2c4bb6b9e141e59e94f566b55650d","sha512":"8190af78435fb561867cc63b820177842fca11a6f869b5e277e5720843c99dc0547c7e557af69d02f158237993af81a7f82783685e47f7572e67bde41645a207","ssdeep":"","tlshash":"41310a8261c2d878de59089b41308354bff5f94ba3b5817cfb718b3fe2940884679b07","first_seen":"2023-10-22T04:22:56Z","last_seen":"2026-10-09T16:49:35.953373Z","times_seen":133,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/assets/index-B1i1_QXO.js","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:19.949Z","timestamp":1791564379949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /assets/index-B1i1_QXO.js HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:19 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dqrz25EHS8PdMZuUzRed76mGq5ZyLuzPZSv6XB6eS4XUHTrrzyQAkI2VDnNLl19FnC1JnbJqU1mLaGjoY8MMazt34n1qEnKKcBlPZgaA5n8w07Ymxvfyy6MhH18e\"}]}\r\nlast-modified: Wed, 30 Sep 2026 06:50:51 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6abcb14b-4a0262\"\r\nage: 2405\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47edc5eaa2db50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4850274,"size_decoded":1320296,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25964)","md5":"86ac9b4a505046485ba3c8ff054d22c4","sha1":"4dfe2903b99f333c955c319f326bf2572aebe248","sha256":"ca2f6e6fa77bfba06ca23a449c8971602a2a23105d870d063cfaf60575c74d82","sha512":"311a9f60762fdf01b1a56bfb81dafbc16d304e39f6d3fb014d3b592106386ab370a2060261513a57456d7be82c3f0148670d3b994f3ef76488d9afb090049f1e","ssdeep":"24576:DB2s0r+wVt4sZq9k0dkPXRjXfcQyEKtM1Y8OTtPxBk4nrn8:t2s0r+wVt4sZq9k0WPXRjX0QD1Y8i5BC","tlshash":"e9253bd47696b46d83bb81e850bb0001b33e2a98740d84e0f1bdd9b93a63d55d2a7f3d","first_seen":"2026-10-03T11:59:34.12089Z","last_seen":"2026-10-09T16:49:35.867996Z","times_seen":5,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/XAU.png","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.215.220","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.850Z","timestamp":1791564382850,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/XAU.png HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: MjaUVg5p+14aYibzj9POPtJ0OzvMJF1VoiV06nlr1DE4dH3nbngHDvSeJTNP/dSfMP9536ErqAMzHrhuqn8OISkjyvj/8TdL\r\nx-amz-request-id: T0V6CQWD84WF0EM5\r\nDate: Fri, 09 Oct 2026 16:46:24 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"05921b19d3be159b68972189c3f45773\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0a31970641800f15755481368d5c2822ae1bf0ca87a5e934b5c914002b003dc7\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 743\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":743,"size_decoded":1290,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"05921b19d3be159b68972189c3f45773","sha1":"d477258c74a875bcdfa51090868782d73fc54db8","sha256":"0a31970641800f15755481368d5c2822ae1bf0ca87a5e934b5c914002b003dc7","sha512":"2157eed35a12d20c87ecfbb4c209c36b160a95d9610897b449c9dea16966a98b194c50070865e66ef54a6e8b61052d312dd56905fb396bd4ba93683341b8eaa3","ssdeep":"","tlshash":"c101e9631ab0ec4bc58ee430c1f75464ae1104a3008aed63d80fcef14d30387f2060c9","first_seen":"2025-06-23T17:22:26.242858Z","last_seen":"2026-10-09T16:57:30.516632Z","times_seen":135,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":250,"send":0,"wait":277,"receive":0,"ssl":510},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/img-333.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.882Z","timestamp":1791564382882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/img-333.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-722\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBRlttCz6yho%2FFiuQIgoKeBenV6S2%2FDh5FCEwJgJ0uICn3SkhAVRxgRJNx2hJFhkUZLcXIgeVqn05e3ZyN0aCUWUibvN6qMGNanS1Wxtu0Kdxm0%2BqQzjRHMP8%2FiU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc70fd96b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1826\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1826,"size_decoded":2517,"mime_type":"image/png","magic":"PNG image data, 164 x 30, 8-bit/color RGBA, non-interlaced","md5":"9c16c4d1fb438820ffb844b015fc5616","sha1":"f101d218e90ad70f4b5ccd9b9f6a72e32be4f8d8","sha256":"c45c94bad512505ef6099a186970f2f0f0129f5e49d0c00d48bfb48d7fa18b0e","sha512":"e4dbb6ac4235e5606a3d57082deceef0f285f4664f3cf53cab4e0f02fa3179bbd740b2fc0d023df7759a4bb2e10e941a036aed16e47713ea13de412deecc1730","ssdeep":"","tlshash":"bd310bcc3e630dad917f4c7012169e77dcdef888dad0598061491937ca062e221f64f3","first_seen":"2026-03-05T18:43:11.092832Z","last_seen":"2026-10-09T16:49:35.951036Z","times_seen":21,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/XLM.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.884Z","timestamp":1791564382884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/XLM.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1181\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:53 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:26:47 GMT\r\netag: \"d6deb1aa7365929e2cf751b88e56b5d6\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: tOtVTg._d7pHBzfJWjw42gq60CUl4QL5\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: wdRRYa96cgBBLXqIojEym5dn4Vszt1iwkHJ_cVZDVv-SB3fNtIrs9Q==\r\nage: 14309\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1181,"size_decoded":1830,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d6deb1aa7365929e2cf751b88e56b5d6","sha1":"e0cda9534a323c08abd29d3ff2a056207354b0f9","sha256":"efb48136213036c6ca1e9d0dcb46c97b5b0e92ab6d12b5ba7fe6b46eb8e8089d","sha512":"69b9e0fe30ade3046b5d9a04674af070eec5fccde45e1610f24b81909c5534e6413269e1a0e13bb6139a1902d31931b6ab83e3a1264a5b6e6155796dc0e52e67","ssdeep":"","tlshash":"c821c6fda34b6d8185134b33bdb7945ffcbabcb24021d2447604b85354760091e1edc9","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-10-09T16:49:35.981647Z","times_seen":216,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.770Z","timestamp":1791564383770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 15:59:12 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC90F50945394373869C881\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11117890345216515431\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: hROW2spQLPFFIc7LAqymaw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ofrhL91N-tZ0s4_dTCsBMMaSDpeUYxYiGQ6nmMRVBjfrNWuBqeTu-A==\r\nage: 2831\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":52936,"size_decoded":20356,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13923)","md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-10-09T17:50:40.752898Z","times_seen":533,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385116\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:25.124Z","timestamp":1791564385124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/centrifugo-token?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385116\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:46:25 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a47edc7f1b8f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":559,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/blue.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.351Z","timestamp":1791564383351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/blue.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-4a4b\"\r\naccept-ranges: bytes\r\nage: 2401\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXuw0ZAqO9TpAFZPbLvPLKFjvsROIVevJUHNHm7Ua67aqSrXuzcysLu9cqxip%2Bx7wMywPDTNqHsf7iQRZbsF92kWe7GXmrMxy%2FAkKP00ZuoZChbTWRC5luss551%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc73ee10b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19019\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19019,"size_decoded":19708,"mime_type":"image/png","magic":"PNG image data, 397 x 43, 8-bit/color RGBA, non-interlaced","md5":"4118821862991e8b83bf7fd1735fc8f8","sha1":"b1e28a1237e982c83ff4141309316bd644e04b31","sha256":"570342d8808a83b47b2d222498115e2f54612dd451876fbf39feaf70bfbf89a5","sha512":"82688bf2daeb8372a4377960f35260a38e12409a3f4a77a41b48f1efedd1fc978a80f955503b8f0edf63f9983be887252bf0e6db028432cde79a2e4ca4a4985c","ssdeep":"384:0Dv6ihwsMFQ/UHVX/X3czkB17nDUBOqX3Z7FFsiIWUvVQYoc6IZ4c3r:8nhwDHX/cc17wBrwiIFVDTaI","tlshash":"b882e0f3a61627b0732758b9c0fa146e97bcc03b144bf6072da3c05b14d8d99eb69236","first_seen":"2026-02-01T00:50:34.433036Z","last_seen":"2026-10-09T16:49:35.918469Z","times_seen":22,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getCoinList","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.285Z","timestamp":1791564381285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2BxdmT3sfdVqvEEqTl6Jq1NlhzShb8lHa%2FMwp8vgGfZhls%2FzwxLDLEz3lBBlsA3uXutmDx5nhASHAMGELYQV9rsCKrOd5h%2FwZlCucZQTMeAyTXLFeHxsHTILdvWddzB8ow%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc670b6fb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":715,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026direction_type=1\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385463\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:25.472Z","timestamp":1791564385472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026direction_type=1\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385463\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:46:25 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a47edc812d0f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":559,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/USDCAD.png","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.215.220","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.854Z","timestamp":1791564382854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/USDCAD.png HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: M/IacZ/MToswZKZ97C/kmChO6xu9CLuoCpgjvsLr2xUGhxzGWluSpAtlZtk0/CPhNHMoKGFhi9kK1zT6qF/93ZTrJqTConnm\r\nx-amz-request-id: T0VBFFH18F5DPVQG\r\nDate: Fri, 09 Oct 2026 16:46:24 GMT\r\nLast-Modified: Wed, 04 Jun 2025 15:01:06 GMT\r\nETag: \"1e56857e9cf28a83204a3a1fa7e2356d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ec3b65d1a065cee5ae1dc1c9e6863365eff7dbbc4eafbb9bb1f8ef1c9900a9a4\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 41734\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41734,"size_decoded":42283,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"1e56857e9cf28a83204a3a1fa7e2356d","sha1":"ce5a4354e71282f64e56f3a797a01909249f0811","sha256":"ec3b65d1a065cee5ae1dc1c9e6863365eff7dbbc4eafbb9bb1f8ef1c9900a9a4","sha512":"f67fb0b2c9b5a8f2fe862cc3ba7f080bfecab1b04b6412dcccd148f626861e2c9249754a2a878c7548d9de9788cb79f8f246a1ee50dfd79b30dfda8678bd3f2d","ssdeep":"768:oelrBWM4IrxzPICirSKiwiS8D7RUIqIeg7giLzM/apb56bDOAgFm7lW7n3Bzj2:o4rwzIGCNKiiYR1eg8i/M3C+snxzS","tlshash":"9413f10a904e939bb89571c400d18e30def12d8de4c4b85e755ceedada96aa1fe363c4","first_seen":"2026-02-01T00:50:34.417889Z","last_seen":"2026-10-09T16:57:30.495133Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1284,"timings":{"blocked":-1,"dns":0,"connect":251,"send":0,"wait":271,"receive":251,"ssl":510},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neweasset.s3.ap-southeast-1.amazonaws.com/3/svg/yellow/pc-icon-left.svg","fqdn":"neweasset.s3.ap-southeast-1.amazonaws.com","domain":"neweasset.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.573Z","timestamp":1791564382573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /3/svg/yellow/pc-icon-left.svg HTTP/1.1\r\nHost: neweasset.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: T0V5E19AKZF9AD8D\r\nx-amz-id-2: zqCHdVaw6Lwa9kuQTw40wHWD6cWp4qh8RQHlpJeRfbV9Vp8SAo9uAMvGgbsxtPrNNNfkpvL2APpbBxvxcwx9St55hmn+dUOI\r\nContent-Length: 565\r\nAccept-Ranges: bytes\r\nDate: Fri, 09 Oct 2026 16:46:23 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 13 Oct 2025 08:37:56 GMT\r\nETag: \"5a9cc0e87ba92d1847ddcd0fbc1f90ab\"\r\nx-amz-meta-checksum-sha256: fc981e7e877b7df186ec5f40ecdb56554695ed420cc41dfbfd61775e6bbb718f\r\nx-amz-meta-s3b-last-modified: 20250602T101706Z\r\nContent-Type: image/svg+xml\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":565,"size_decoded":1125,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a9cc0e87ba92d1847ddcd0fbc1f90ab","sha1":"d1dd2d4a0685f3b4de5adc14ad0e96ac3bf4c40e","sha256":"fc981e7e877b7df186ec5f40ecdb56554695ed420cc41dfbfd61775e6bbb718f","sha512":"2da731ae4fac4d8bf884dff0850667e84b2494290ed8841ed477a4d36a6f7cc3b766bdf1a5c93aa7f40f1b5a3f6f6e65feb998de3ed905a7706e2c4fca257c59","ssdeep":"","tlshash":"50f0e1fb5b46c2404cc06b25e4782d62fc6e18b7dbc4876d90e940d1a1b11d68b80468","first_seen":"2025-08-02T08:37:54.45522Z","last_seen":"2026-10-09T17:22:19.375178Z","times_seen":147,"resource_available":false,"data":null}},"time_used":1054,"timings":{"blocked":-1,"dns":0,"connect":257,"send":0,"wait":276,"receive":0,"ssl":520},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/bussiness/followOrders/list","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.668Z","timestamp":1791564382668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/bussiness/followOrders/list HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXSVhsxefe9KEGnO%2FvagWtngXxAF%2BK%2FgLrzlmE6LbnFIWzfxktKQtFCqkAaJTXWhZ96lt9%2BxTtlVDp8xduEujXMFoAwph6dvSO3FHOEFW6pCGXz%2FQgkOgJkCPQLJI4NlnA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6fa8b956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":717,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/chat/widget-v2/code/install.js","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.032Z","timestamp":1791564383032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /chat/widget-v2/code/install.js HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdyaMdtF5xvFzvJ7qCTXYCH4xi7akN%2B%2BO6ycNDi8al%2FSghUSuDNH83dpoOquNtqIGuAVfhl49hYZKXm4f9ZzeC8mLbKyG5VTZ1TgYP6IEk1z9iNOU5%2B%2BWbHPvlfJ\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc71edb6b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":741,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-10-09T17:28:51.254602Z","times_seen":47757,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/one2.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.359Z","timestamp":1791564383359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/one2.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-808\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwI77LEzpAkLRPo%2BnHjR%2FA6e3DxQY5VAhJq7y0o%2BX1rKbuKHUG1BMOoD9lJepNqQa7POVpxdi5g2asT7wGv7g6yGUkdGK29EjTn95iW%2FVFpWZ9UJgLu3Z7m9RhFp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc73fe16b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2056,"size_decoded":2745,"mime_type":"image/png","magic":"PNG image data, 40 x 53, 8-bit/color RGBA, non-interlaced","md5":"ad328d078f6e6a5875c0c7fe2b1baffb","sha1":"bbd56d009378e4548af1a11a1e8159049b03212f","sha256":"65cea73c1f636e5f2632980ad4a0187262549d284ea7253fbdf788bda5f09c58","sha512":"3641df7ff87b537fe78ee7bb1a648280a76bbcee7beac8f32ceb9dbf9caf8e7592b5090304844be4a2de6dfc929249295cdcf5b243b00203d1a720939f04f0e4","ssdeep":"","tlshash":"0941f8deba50521f7a0e04e7b1e20165f60c179e4b9209a87df4151eac8afa4a43a2a5","first_seen":"2026-02-01T00:50:34.402341Z","last_seen":"2026-10-09T16:49:36.006226Z","times_seen":22,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/icon-617.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.561Z","timestamp":1791564382561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/icon-617.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-364\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUlIvNYoC14ltuzvYng%2FHhTsQzOMAtQjBTTbx1RVTn73afmNVeTlkYCwcobun9PX941R8qwZvQ6%2BKV1By%2Fe4W8vxzSo6zfQtgN6shlc0ufS0TOutP%2B6MuHnLTsEh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6efd31b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":1556,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"edfa2d33da3c8a1fbc9907dca22ce986","sha1":"78ed76ab7816c306a12d4750aa4c32359f346716","sha256":"470c0cf365f719b5a7ae9a51da31f2194e54aca5130c2ce40a92e8fd9ffc2a17","sha512":"b9db1a1bcc3896536db415a7630ec252d68889d8b150ed1f5d0218879872eddda876e9e530acde5cd10240373f61c43a7373339ffd5ebbde8f78541ac3aa1858","ssdeep":"","tlshash":"f411daf777aca806531e08f94373152641c7343917103d335a0c3dc8f424858cea57a7","first_seen":"2026-03-05T18:43:11.223682Z","last_seen":"2026-10-09T16:49:35.922024Z","times_seen":21,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/fonts/Arial.ttf","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.646Z","timestamp":1791564382646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ktxjp.cyou/assets/index-BoLUGZeU.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6abcb145-ff9e4\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8%2Fr51qg%2FaPVT5v%2BnFDBJ1Z4ZiVJaDBgaDoE9oGbZAuKbR%2BA%2FAbLIaVgAbGE7cfv5wQtP41OmSITyLD%2BD8cPSk8rAXe1uch68ui5PCNKsYY5nAQ0gXr3unXxqmts\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f8d51b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047728,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-10-09T17:24:31.075292Z","times_seen":8396,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/bussiness/portfolio/list","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.664Z","timestamp":1791564382664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /api/bussiness/portfolio/list HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1a6NZxljmrwZJ8%2BWF33Z261V9HJnePU%2B4z22LUPjHPrnKegif4nJfyLHnZwse0%2F5fmuyjQ%2B1gV61dL7HHT63sHTYopTQJZKdzSO1fJ%2BqtE%2B6C56N7x%2F4Ton8BbLXwIUMg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc72892856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2410,"size_decoded":1457,"mime_type":"application/json","magic":"JSON text data","md5":"9f0f4ba1570e1b32193adcef53839300","sha1":"4d6dd5ae6aad6970ea83929252404a38eabe64ab","sha256":"0c6450b43081fcf6ac0ee3eae5e6abea6640aa7546c99e33eb8236e331254d38","sha512":"65f7f30d6dc44860ee6f6917225887c944c0e8d91f3ee6b0900e1e5c2518a7f915066f4c197c9c13a3fe33ff3af346102c021ef4d4cffd03c609b5acd8e1c3bd","ssdeep":"","tlshash":"6e417966a4319eacb56844c2085e7ef27d8d735f2dd08eb184d9cf0c81f2d72582e62e","first_seen":"2026-02-01T00:50:34.419719Z","last_seen":"2026-10-09T16:49:35.941216Z","times_seen":8,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getMt5Amount?coin=xpd","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.878Z","timestamp":1791564382878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4xTHdEBKNnrDrhyE4spbHgudhj2%2BXKH%2FXM6%2BnDPsqjqzxqGvvtf59%2FYUmTG0MZyubTwNGY8fePcVTJ6FBS5C%2F1pi1HryRqlQ%2BbdfTU6vhB6ksfttvuq4cfH5Eb63qtdQQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc72992b56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":893,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8f2b9f9ae0b90eaf306fec7785f9bc90","sha1":"3d23cef3aebb36011534929ba6dac00301ef6485","sha256":"b9ad0696728f845adf5951eefc004ef6adfe0c245d3e2381006691232676dfc5","sha512":"872e36059baf1c0d7ae23bcbf03adcbb88f68d181c9af0c58aad930e0b2e9a7c6473867f4f6082615900e670aa87dd59bce62e4f94124f7715193103aea0ea02","ssdeep":"","tlshash":"219002555c1c8262a88300a5951a128c002631a0263492484c5a912680d81a22444868","first_seen":"2026-10-09T16:49:35.165369Z","last_seen":"2026-10-09T16:49:35.165369Z","times_seen":1,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/anquan.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.575Z","timestamp":1791564382575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/anquan.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-7381\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2oiFlD4SN5rE9hamWW01W5cXkEylV6MH5nhruX56jwb7npecWjSiB4QWT9OXPgxwEe3goG9dzrrZKy%2BKr0W0ynbD6Jx4qxrwsYvoTArh6hUP6vyU32%2B6NDf%2BUS7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f1d3db50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29569\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29569,"size_decoded":30258,"mime_type":"image/png","magic":"PNG image data, 138 x 156, 8-bit/color RGBA, non-interlaced","md5":"a16ac9fb738ebd68f14b2c5e73ab3cf7","sha1":"b8a8f6fc499cacc8f8c4bad003af18c3e14f3215","sha256":"2c35b1e58a56badd75d1003e7bc98ef6b0650da9339b49f6dd1df180c886b635","sha512":"850f6aa8e5168dbf64a44bbef5b0184ec148e6d4d52cde500248e02040dc5388e3c942bb0d656e408fbfd4d8ed41b1ad54c7b314538eb3f716e19e62ff9aa2a8","ssdeep":"384:HRnpz9jQsQGM9+kkbME/TVpk38gDb4nEg6TpGjrRUFpUUe4tX48Jft+oSYnafCgv:xp5jo9+FAEbWkXopW+X4KQdYn0mWt","tlshash":"bcd2e1a4ba1be03e4937722346931f3055883d2908277fe5785b12b93f3db822656bb5","first_seen":"2026-03-05T18:43:11.225289Z","last_seen":"2026-10-09T16:49:35.929252Z","times_seen":21,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.ktxjp.cyou/ws/ac69b21b-addd-452a-b7e2-6c6cd6454579","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.277Z","timestamp":1791564381277,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /ws/ac69b21b-addd-452a-b7e2-6c6cd6454579 HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ktxjp.cyou\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: o+2p3txNIaXdcJiUuWo0vg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 09 Oct 2026 16:46:21 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ktxjp.cyou\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: uzRYGgBQXxGtXoU8IicahY0aLss=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZtBNDb3A%2BUJOZeYgmFsBGHJMQmgE86j6SVM13i%2B3O51yVBMLrFZ%2FSL9dpFaXG%2BWaDM3SJzbXK%2BVQa3APzxrqS7WuThMwE6a08dUHusm%2F2BKHIttSozEffkzDjkIV0v95A%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a47edc6728bf56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":881,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":0,"dns":21,"connect":19,"send":0,"wait":421,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/ETH.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.845Z","timestamp":1791564382845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/ETH.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1100\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:30:28 GMT\r\netag: \"8658d5935ab59ee39d15c39226279d46\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: fcMwz_FrxevnVgNtIlzpA9y6vfUJIaPK\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Z-EcmqO9pK5zMRmN4GlmlKMAgAKKlt-u2FRtXvyjlHLV4TLUxP5Yhw==\r\nage: 14323\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":1749,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-10-09T17:24:31.111894Z","times_seen":7852,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":15,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/plugin-BrcH385T.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.719Z","timestamp":1791564383719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/plugin-BrcH385T.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:35 GMT\r\nx-oss-server-time: 8\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8AE5FC9BFCE3132C18B2C\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15254958038375797185\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: siAwKLOc/5iWX5dXxRsacg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 3-ZT0Kz4XwT7IV0K8szq7Or71A9b_w9Vw1qCwASXSe5oiG0WWYHuog==\r\nage: 27648\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":328964,"size_decoded":95225,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b2203028b39cff98965f9757c51b1a72","sha1":"2937238582042315a986989886fed3e92ec35a5f","sha256":"98d7ef1f37cb27fa4295a5e516f641fd6e6240936d3ed2b6b561fb958e4e6cab","sha512":"4e3f2e0a419d5ff43027e37eced3f4fd62b2758359e8daf6c4b221d66a853eb03358368ae5393975c2c3d74801fe409077f34442aad2958fc3ca01debc305aa7","ssdeep":"6144:JFoXHJxcnD595VSSTDSv8MHz3xQRcOcOc5mjeiwORywd:JiXonF95VSSTDSv8MHz3xQRcOcOc5mjl","tlshash":"a864297ceb10313df937ca116ad0b29c6038a0e7feb20d9dbe557219c2d60c946b5a6d","first_seen":"2026-09-18T05:08:27.044503Z","last_seen":"2026-10-09T17:50:40.749036Z","times_seen":89,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385462\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:25.468Z","timestamp":1791564385468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385462\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=26b09fddc58b937ad10aca8435e7f46c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"26b09fddc58b937ad10aca8435e7f46c"}],"method":"POST","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nx-request-id: bd4531cb-279e-448d-a711-7c8a7547c4b3\r\ndate: Fri, 09 Oct 2026 16:46:25 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncf-ray: a47edc812d00120a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://ktxjp.cyou\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":712,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-10-09T17:50:40.790711Z","times_seen":2481,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/LINK.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.887Z","timestamp":1791564382887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/LINK.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1008\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:53 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:29:13 GMT\r\netag: \"1d8873b15ce7e65a262d1788f19912ef\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: S2vK8u3fMjmU06gQqC7OahmrWHePpcgn\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: tlC1D7RbXoQ6iMewgoqCb09fyyyxp6ZaUCesbjE4FeKtZkVSPqjCfg==\r\nage: 14309\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1008,"size_decoded":1657,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:15:27.971612Z","times_seen":528,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/charting_library/charting_library.min.js","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:19.946Z","timestamp":1791564379946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:19 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oideaslN%2FJ1YqvkoiERDRhy9HcZfvYoauBh76X4dXmz019EGdE7zL9jvdD7rgfA8K%2F0u7Pcz%2FlYpsm%2F%2F7BsFBok7Vv5Bzxw5x1yH2yzxZG4PV5eXsphdK4NUvc9\"}]}\r\nlast-modified: Wed, 30 Sep 2026 06:50:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6abcb144-3d3d\"\r\nage: 2405\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47edc5eaa2cb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15677,"size_decoded":4590,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"234cfe0087e52703b5600c3ac708bf16","sha1":"88a6aae1de2a345610f5eed535749df2709badf4","sha256":"b560abee96cea6274a84460c61016941151ae1fd8c9f9f117333cdd2532f69c7","sha512":"64dd694ffcd9bc94681a9c2476f59d21af838df2fd3c36ed0a0e7b994c638c9c54179f01e6c1fbbc3e7b087e35a6e6a987f805f1c8611a4088ec703157beecb0","ssdeep":"192:w0+5tO8F1+r74rD0w1p3QbhVj5Cix+/Zich3OQj5jYB5ql6KMIp4OMCLIpMBCKkp:0R634FgVjnx+xVF5ja8jpjIpPKkp","tlshash":"cd62bb1adeb9283105d770f4896b140b6535922f98869d483ccd83dc0fad46e66bafbc","first_seen":"2025-08-02T08:37:54.349275Z","last_seen":"2026-10-09T17:22:19.329019Z","times_seen":188,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/notice/getAllNoticeList","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.193Z","timestamp":1791564382193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9bJgddIFsP4%2FoFpZdzW%2FwgPp0tFR12lQ%2FIAvmxbljz2KUJ0ol77PMVJGbUuBWALySoDbhLUaUYNUeY9nIruYQFHCPqJuBlfo0qEVtBuFnEtruVKdsjkrOZOrra%2FrW699Q%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc6e186e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":657,"size_decoded":1309,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"06b9530f62c0d4fc405b5f169e65a061","sha1":"2be5a74a7d952095adffcb94dd506b6f11e84f3d","sha256":"25105fa61e10773adee027d9336cc2ca41e597515acdd45c86278acf1fb8e976","sha512":"04570d61939863cb26cfbfb5038498e26d2416e3ef3caeee474b715ec10d5672b11ae2fac64ea5267f74f70a90f1af47c5cb7d8d32e5bc0fb51213be57b1d679","ssdeep":"","tlshash":"bf01dd4d12bc8e719813e4c710cc79cd912e1f87e5a1cc3045aecf1985f127aca19a34","first_seen":"2026-09-25T14:15:59.438234Z","last_seen":"2026-10-09T16:50:47.253618Z","times_seen":5,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/BTC.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.836Z","timestamp":1791564382836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/BTC.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1125\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:39 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:30:33 GMT\r\netag: \"75f196b437f9d87fdc198bc904c66c4c\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: KEU_GNz.cEPy87FxxsLaGlv3ekYfu6Aa\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: zZ_5bqvpbXNkOsWREPyj1dDyny5renprJkQGAnQuIHfN-fhV_noSdA==\r\nage: 14322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":1774,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T17:24:31.098571Z","times_seen":2096,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":14,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/DOGE.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.862Z","timestamp":1791564382862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/DOGE.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2808\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:53 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:23:16 GMT\r\netag: \"d55dd75446d505958e5210985b246bed\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: 4UYcBvJMh_uo_yVng7x5Db27Q1WSKk7g\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: kIKjNEODtjLJ6M4UVsMgLboXQEbuIh7Ja6tJi_LQtCphpge7Z3Ioiw==\r\nage: 14310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":3457,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T17:24:31.10822Z","times_seen":1165,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.527Z","timestamp":1791564383527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:34 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8AE5E82114332312E1056\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4629340629526719112\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: Xa21QxaOrUkQS/29mmeS7A==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: bY5A1VQGgeONX67TNYRGjmQoQs5jDqK38zy8NrWcMUn2fDZzH5C5cQ==\r\nage: 27649\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1673,"size_decoded":1465,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1672)","md5":"5dadb543168ead49104bfdbd9a6792ec","sha1":"e107d310f08d785f513df33c57ffd4d5ee9eb38b","sha256":"180bebe289c59cf98a27430d0753a1a50170d40e40524b05c8373160a8696d59","sha512":"ea2db13466c34612bc7f01196882e037fffba5b487a7e1c492eddf2777c6462436a709998f3791b24d952229ea01ef373d1cb9be44a94affab73e92f59ed170c","ssdeep":"","tlshash":"ea311499b9b1b431779508f660bfc58bb5723562380dc000d98fec95b92ce60d632e59","first_seen":"2026-09-18T05:08:27.365418Z","last_seen":"2026-10-09T17:50:40.746932Z","times_seen":89,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":33,"connect":9,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.657Z","timestamp":1791564383657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 15:59:12 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC90F50DA989C373173691E\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14618663378529148972\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: C79rAXHz/rRDROo1Bhkvyg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: bwu-vK2gUAdnX-TABwkqIO36pr3t8e9R92dywDyH-DZgX8xqdNL50Q==\r\nage: 2831\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11360,"size_decoded":5219,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11359)","md5":"0bbf6b0171f3feb44344ea3506192fca","sha1":"99efd9e3bcf49bb168cb02b97e2307f04ea33c00","sha256":"715e5364252b0b8375c3c24f2786b543e71c49b7c322eba63dfc0f2c34734448","sha512":"372d7173ede30cbb3548d235b5ae63bf959dc9702b238e8433ed2d9bba4658e3fc96e02bad0d182e13a398fa9c186e3b6e8c98d78863e1a45b35d2091e4727b7","ssdeep":"192:UoHXYpBtFRiX0QdIYep3KmWnqmQg2uzB98I6yYH7ltCAwxeon2OyTVzY9Hw6RCjP:5HXYpBtFYXSYCWq5g2hyQmGu2jyijVK6","tlshash":"c3321a193832697556b80c9460799301b5ed27633005d4f0f2fcce7eb695f8782b9eb9","first_seen":"2026-10-09T16:09:38.599424Z","last_seen":"2026-10-09T17:50:40.801401Z","times_seen":21,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neweasset.s3.ap-southeast-1.amazonaws.com/3/svg/yellow/custom.svg","fqdn":"neweasset.s3.ap-southeast-1.amazonaws.com","domain":"neweasset.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.554Z","timestamp":1791564382554,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /3/svg/yellow/custom.svg HTTP/1.1\r\nHost: neweasset.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: 398KVNDM0GKBSQYG\r\nx-amz-id-2: Dyz4EKQpJT4jXvYnj4u6DFu8Zvesvu/My3GMo01rU1toQwbriE4ggEMkvS/oYzuSvmy/gbOmeAUZOdmdVts2VeWWNP+tD80X\r\nContent-Length: 1281\r\nAccept-Ranges: bytes\r\nDate: Fri, 09 Oct 2026 16:46:29 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 13 Oct 2025 08:36:42 GMT\r\nETag: \"1bc9b3ed17b93c2be3e99fb058cca884\"\r\nx-amz-meta-checksum-sha256: eb1794093c43c4ca7f8516d58fb21e536c0ac41dbb95fc30cac9df228b3c69c8\r\nx-amz-meta-s3b-last-modified: 20250602T101706Z\r\nContent-Type: image/svg+xml\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1281,"size_decoded":1842,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bc9b3ed17b93c2be3e99fb058cca884","sha1":"a122e87874a020e2a2fadcd51002fb89e2cd3a83","sha256":"eb1794093c43c4ca7f8516d58fb21e536c0ac41dbb95fc30cac9df228b3c69c8","sha512":"140bbf79297d645bb3b36ac6efe761aa49b5cb2580f30db282478a38ae6d10f3a1f234f1fb2db791e440f6811a5845096352fdf8e347e7ae510a34417527dec0","ssdeep":"","tlshash":"ab2112cc862541fcfca06bccdb203295616bf0eb94d25218d0119aacc1eac7e98048ce","first_seen":"2025-08-02T08:37:54.296224Z","last_seen":"2026-10-09T17:22:19.356807Z","times_seen":133,"resource_available":false,"data":null}},"time_used":7193,"timings":{"blocked":-1,"dns":1,"connect":255,"send":0,"wait":279,"receive":0,"ssl":6657},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/ssc-iconfont-CvtfPMD8.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.717Z","timestamp":1791564383717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/ssc-iconfont-CvtfPMD8.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:35 GMT\r\nx-oss-server-time: 13\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8AE5FAFCCE6393869DAD4\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2681771549310603774\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: PobtdwDKoyu/AB0zRTW4zA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 89XAnXvyzJYaqbvHrkV30biDaV6dtyTzYMeQRJz0GDPJr6QrJmeO2g==\r\nage: 27648\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":149811,"size_decoded":66408,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3e86ed7700caa32bbf001d334535b8cc","sha1":"a3877d3becda80e835f0e5050408a8868a742166","sha256":"fa2e8e908d997d5c56f36a8071254fea91454c787c4c880e30ffc879ac661723","sha512":"4355e6eec3ab00b907c23d724b1befa5b14d66f9f279b87195086be554cfaa014c35983eb5f80137539a2ff203b92f42f53af6656488521d236cf41c9f9f413e","ssdeep":"1536:JunTDOzLoiyVimLONTaeMxv0UqGgzlfzLSqFpFWGFeFjF4FFcpWtE+uV+F8oe5Iz:JFoXVdU6xcnnz9u+V","tlshash":"7be308bcea5115ddfe39ce47271072189c3630effef44d98aaa632495be548cc5a0878","first_seen":"2026-09-18T05:08:27.214854Z","last_seen":"2026-10-09T17:50:40.748424Z","times_seen":89,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.772Z","timestamp":1791564383772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 15:59:12 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC90F50108AF53736A11C7D\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12708522076119217507\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: 8qJFifcjKSlc2ZVLi4Kniw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: tY_XXehaAqaS-VIcDqquYhqrDBvwxNgiaBW9gdTxtdWZlQ0hbcP1OQ==\r\nage: 2831\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":50154,"size_decoded":16349,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25425)","md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-10-09T17:50:40.846878Z","times_seen":532,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=3e610a8dcfc255cbe3647ad105814a93\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564384812\u0026_lt=\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:24.816Z","timestamp":1791564384816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 13:46:02 GMT","end":"Thu, 17 Dec 2026 14:45:59 GMT"},"fingerprint":{"sha1":"6B:52:F9:47:66:41:96:5A:37:0B:77:43:46:F5:FB:DB:96:82:F6:36","sha256":"F5:48:C0:4F:08:39:D0:49:3C:36:E9:6B:31:19:B0:0C:85:3F:85:03:4F:14:0A:44:E9:22:88:E7:1F:D5:28:8E"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=3e610a8dcfc255cbe3647ad105814a93\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564384812\u0026_lt=\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 344\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=26b09fddc58b937ad10aca8435e7f46c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"26b09fddc58b937ad10aca8435e7f46c"}],"method":"POST","post_data":{"size":344,"data":"source_url=https%3A%2F%2Fktxjp.cyou%2F%23%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=69a77833d08ebb4250102e0a50eca8dd\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext="}},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nx-request-id: da016e0c-e38f-474a-bfdc-40897cf05f6c\r\ndate: Fri, 09 Oct 2026 16:46:25 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: a47edc7d38655a0f-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://ktxjp.cyou\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":794,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ff54f98207d55b9d8cd252f5d9bf92bf","sha1":"60ab0b38b901ac9a5fb81d90ff0630b5462d2efd","sha256":"2f49485b25b12efcad57119c3b2693359fe3778b90ad1859eaacf1b3c805becf","sha512":"d8aa6bf6c066ece4f6b619e57bbe2c0c84cbacb5b540c949f6aef23d7f5da186b077eb7a5b8b94a3c4ea9374746eb277a79238d56fc310c68ff0af93f40c89db","ssdeep":"","tlshash":"22c02b26ebc883ed07cf61ada0043243a58804344d82eb1fecfc51780a8c25132e3c12","first_seen":"2026-10-09T16:49:35.205543Z","last_seen":"2026-10-09T16:49:35.205543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":10,"connect":9,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/platform/ktx/favicon.ico?1790751050655","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.055Z","timestamp":1791564381055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /platform/ktx/favicon.ico?1790751050655 HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:21 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Dah7u9%2FLyhFyGlxg7dCuIrQp5QmQp1Ebc%2FLT7QukdxjzsWSxh2myphwHRvDMBCc3cxSS%2FJjO2p0GzmjgDj5zlZbtzMiRy1QTipEhDQWN3w5LQkYNSGGShsAAxP5\"}]}\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6abcb145-10be\"\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47edc659b39b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":1645,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6cdd97837dcd6152342cdb57862f2f16","sha1":"d78bb7a9c043a4d5e305a3f07844428ab33b705d","sha256":"5bb6a382637b27816f209d50f7619ec348a9df4090ccb270b6b3f1522d5a7a29","sha512":"0e4732868203a18f44c7dda0c66d1905913030ca3b8adc84bc7e17dd675db3c0ffdbad1f172b3d18ea2c36745df46dffe7bcea2977d4084dc4676e43ce15608a","ssdeep":"48:tvS6zch7r0zS5RnyxvQ3YgwqSJT+xW545kzTj5pP4:tvS6QrRg+8oyTj5N4","tlshash":"dd91c17b9e8f972bc95d1cf28a3e1ce2c2770fd998dc47c980902caf095748b30499a5","first_seen":"2026-06-17T17:02:10.167569Z","last_seen":"2026-10-09T16:49:35.891814Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/XAG.png","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.215.220","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.851Z","timestamp":1791564382851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/XAG.png HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Jgo1oyY4t8UznhB11KMSn1VgVX3lN/eZJBIK8i02V/rO86NkwFfZawGq0aWjYRvLIQq0fiDonj4dN5TjLN9TbwrGBHu9f8HG\r\nx-amz-request-id: T0VC4JEZTF62DJH0\r\nDate: Fri, 09 Oct 2026 16:46:24 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"5d36743437c9cab9218922a72775f9fd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ba878334f20401dbccb089792dfebdac5e90f8db1cc2e7c5f5365a1cc58e91f9\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 659\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":659,"size_decoded":1206,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"5d36743437c9cab9218922a72775f9fd","sha1":"91383aaf31fa9eec0805bbbc40ca5cd0a7753419","sha256":"ba878334f20401dbccb089792dfebdac5e90f8db1cc2e7c5f5365a1cc58e91f9","sha512":"ad6a46a947518469fed771943f64f6ecc450519526e44810ab880872b7a189fe912538699ab50b65ac1521cd45dae7a1b1c542e3771c479d3181649e8ecdbc96","ssdeep":"","tlshash":"2301c88773cf2d28c15a1d63e939bc191573024a5017cf0e86497daed3b3746825f117","first_seen":"2025-06-23T17:22:26.279809Z","last_seen":"2026-10-09T16:57:30.480624Z","times_seen":160,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":252,"send":0,"wait":276,"receive":0,"ssl":507},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/WBTC.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.885Z","timestamp":1791564382885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/WBTC.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2403\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:53 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:17:15 GMT\r\netag: \"6ed88c45b665c3040f6355a0fa67ca8c\"\r\nx-amz-version-id: FUT5ROtOo7.HXeNq5l0Ouh6vkMKIgTJ7\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 03NVhu5iUKGjE11oWjxubA_A5JR0YAZwAaqO0Qla47RSjWkqnRS16A==\r\nage: 14309\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2403,"size_decoded":2978,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ed88c45b665c3040f6355a0fa67ca8c","sha1":"43ea61ee069f7a67027f6ff315c6c6b0e618c4e9","sha256":"55fdbdbf15f9415a55996ec176f50420f289cb629f7b65335960b47874056a97","sha512":"4cdc68655fcc62dd8ae3f1157a1cf577e0c319826330350827ae83f3664664bf990e363c94fc30642ed8628a17f84279776920e8d272b602b77ef539bf1af646","ssdeep":"","tlshash":"84416b730bc6fc1abd0784bb44683a1b433df994f27c1646ac1ba06e011260c3cabbc6","first_seen":"2025-06-07T20:38:42.097646Z","last_seen":"2026-10-09T16:49:35.942429Z","times_seen":76,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/AAVE.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.348Z","timestamp":1791564383348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/AAVE.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 9147\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:48:03 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 11 Jul 2024 03:14:26 GMT\r\netag: \"b951a446b7cde16d30950d6d477d9222\"\r\nx-amz-version-id: fDdTmFhDmlyOBLYiW.xffHcLnYCuWM36\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: BDFFbYGUvTPf2p-cdTwkVJWOxDZgZ6puWctVB9Ge8NB4ojrT0UgoQg==\r\nvia: 1.1 3c74306cc732cac2927cc4e3489e1e72.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 14300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9147,"size_decoded":9702,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b951a446b7cde16d30950d6d477d9222","sha1":"d88da1fc7330a5e6ca1f128fa6368d3e1fd6ced8","sha256":"670ee14e5a574210e72af620de981a1596da85c84cdf413a034ccb181faf29e0","sha512":"448c62e64c1a2b83a4fe206223c05c68a90b039a428297263dabd21191d42ea164f9c29cf8653a9e6098fad14a2ea3a894e24d2dc7584b541d20ecfa299ad4e7","ssdeep":"192:eFolsULki89u2MSY3tzCsDLdo0kC8mNblrWrxQq/dFl7:eBMgPcPdok5r8L7","tlshash":"4212c0837cd9bd876f4368902a10d915f79f3687849888887674eb0aa240df37c5f89e","first_seen":"2025-03-29T18:49:42.988174Z","last_seen":"2026-10-09T17:15:27.994006Z","times_seen":178,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/newKline","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.666Z","timestamp":1791564382666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /newKline HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABF%2B5wf7QsB%2FOePNYFiI%2BE9HRblj2%2BXel0d%2BfFIWIAvNZ8vejartDaKocWhcmSiHhjLhPQmUEMsrGQV0ZzIHLTZDW2gCWG%2FFahcYccX2CBIEPqLfKWDXSFXLPg5PgvAMzA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6fa8b756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":719,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026limit=20\u0026sender_type=0\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026direction_type=0\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385116\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:25.120Z","timestamp":1791564385120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/recent-msg-list-v2?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026limit=20\u0026sender_type=0\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026direction_type=0\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385116\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: d0a437266cac48fc1bdcef6b7d45f914\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=26b09fddc58b937ad10aca8435e7f46c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"26b09fddc58b937ad10aca8435e7f46c"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Fri, 09 Oct 2026 16:46:25 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncf-ray: a47edc7f3b99120a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://ktxjp.cyou\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 539086c3-b262-470f-87d6-3846a0623186\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":763,"mime_type":"application/json","magic":"JSON text data","md5":"78d539ac5b6a06a8bd02b3ace8debb63","sha1":"8e22651d8d1e678777cfebdb96983cf7df6e751a","sha256":"d817b79090a73b71e09ad6e2daa2c137408a7cfb7916aef50da18a1b1b0229f0","sha512":"e821cc4e11e272ac7ff31855b135a17839c3032c8d1e2a89683b7e937ac1443f8c7732821bf10fe3f120b05c9c5325e74f6b7616a478e5ff9c98ea2519e92a96","ssdeep":"","tlshash":"5390021218281c560b06a48a74091b0591d4114049141621cd8c5158870945c6582521","first_seen":"2023-05-07T20:28:16Z","last_seen":"2026-10-09T17:50:40.790127Z","times_seen":593,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385116\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:25.123Z","timestamp":1791564385123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/centrifugo-token?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385116\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 84fbaf940df5182efeaff31e2f5c1791\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=26b09fddc58b937ad10aca8435e7f46c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"26b09fddc58b937ad10aca8435e7f46c"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Fri, 09 Oct 2026 16:46:25 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncf-ray: a47edc7f2b96120a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://ktxjp.cyou\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: e24f346c-77b8-42c2-a95f-42ebca6ffbbd\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478,"size_decoded":1048,"mime_type":"application/json","magic":"JSON text data","md5":"45af0a526dade3dd4ea7dcce807cbe7d","sha1":"fa436c2ac08400319eac80800b72fee6a6a982d5","sha256":"76cc2a9669c7aa56f8e1b0fb73c332cdd5b9993dd5b9a4bf13b7f72f7e0fc32e","sha512":"910b13b8d383625ec58ca0510dd11addc686eb70692b10750f389597edae2edceac85fa78138761678f2e23d43022d9f32eeb0b09f17fea3941e18f0d1337ce8","ssdeep":"","tlshash":"f9f0d42bb17e3e4628c578125c2d55428c5535e684410c36ffddc0f61b3933c7122907","first_seen":"2026-10-09T16:49:35.216381Z","last_seen":"2026-10-09T16:49:35.216381Z","times_seen":1,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/bussiness/portfolio/list","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.669Z","timestamp":1791564382669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/bussiness/portfolio/list HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZhF4m46KpTO7tnSdFYc%2B0GB9Q1YH9xIGy9sUZgJ7DmyshTGfWah5cIRr3tUHXmx0C3t%2Bgx9PB6PiDp%2Bn879H9yaPMvBX22ZLQ%2FLAvOmCRqYj6SV8QVUEGilLwO%2Fw48Izg%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6fa8ba56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":717,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/1B29B44E348146B1.png","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.215.220","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.858Z","timestamp":1791564382858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /1B29B44E348146B1.png HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: F9xGL5/VNTtRrppolTPNa2Zgd8Pm0c7OWzmI1SEhuu2yZLYM48bz+bgC9iBFBm5GqHbHT7loQme63KuXaOanzZI4RGZRxTqM\r\nx-amz-request-id: T0VDWHMKX60DWGYY\r\nDate: Fri, 09 Oct 2026 16:46:24 GMT\r\nLast-Modified: Thu, 25 Sep 2025 07:46:48 GMT\r\nETag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 2274\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2274,"size_decoded":2690,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-10-09T17:32:16.432746Z","times_seen":6746,"resource_available":false,"data":null}},"time_used":1283,"timings":{"blocked":1011,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/SHIB.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.891Z","timestamp":1791564382891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/SHIB.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 44511\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:57 GMT\r\nlast-modified: Wed, 05 Feb 2025 09:27:30 GMT\r\netag: \"8d274732cb54e6941ea4bddcfba64f46\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: RLr2hZpM6ENxX_3PLbFH_0tW26GqFWmZ\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: tzon4jF2ey7_iURYwWEFRvlBL7TwtPguE5XK5eM6Tn-UwLN-JtNQxA==\r\nage: 14306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":44511,"size_decoded":45087,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"8d274732cb54e6941ea4bddcfba64f46","sha1":"fb41f4bfe16da0594b204ff23f8a9573e0db665a","sha256":"24ab3a6ba578c30e1ec91989d9cb91ddc55c067bce1da35208c0fc6a4350afbe","sha512":"84df8ea9b890eab111651860deb87ffc83f56990a88f302b1452625d30bdca6ebf5ce3c163c4683ab32bf94f814a86789dfeae125874d7dd822139f7f5947de3","ssdeep":"768:YU630H7WlW1iyLJ0fFuXBNJ/Tk4qvJCr2QwLp/7cHRSAmEKMrHXlfD2pbfLs6ozZ:YUdbiW1PWfFqY3CaQkpAHRblr3lfD2/w","tlshash":"e413f1769e475f72b133161051992841da6bfb3f1fbcdfa87a315a689340ad0cb2b318","first_seen":"2026-06-18T15:43:52.723098Z","last_seen":"2026-10-09T17:05:56.012835Z","times_seen":20,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/TAO.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.893Z","timestamp":1791564382893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/TAO.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1184\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:56 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:02:21 GMT\r\netag: \"7030fbeb27bfa58dc4d54d816ca70413\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: 7K2VVUYIMlP1rRH77j8LB0ycyxLw.L2g\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: xxdBBeaIkGTIc60FPcVoVJyqwO3_lWtvbW0CkKwKFhksB6Qpy7afjw==\r\nage: 14306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1184,"size_decoded":1833,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 4-bit colormap, non-interlaced","md5":"7030fbeb27bfa58dc4d54d816ca70413","sha1":"196241c53a7609a0e286f7efd3c81c2ed3d8fe45","sha256":"02f9e036ad2e96edf7e5bfc7d75fd551ccafaa1b30623b278ed7c51cfe9d249e","sha512":"d5df7c1c2856e57017b500452f260125a07b262d3d791052eef9e4ba8b6cba3b97e742311277e3d622183d027907339278258f2b7466ab6e6220b4cd038ac670","ssdeep":"","tlshash":"49210a115ee8c6582c394e1514b3c812368679741850f0cf9a35243cc57030b2c8dba5","first_seen":"2025-05-14T11:04:58.534591Z","last_seen":"2026-10-09T16:49:36.014014Z","times_seen":131,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?language=en-US\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383955\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.967Z","timestamp":1791564383967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 21:51:06 GMT","end":"Sat, 21 Nov 2026 22:51:04 GMT"},"fingerprint":{"sha1":"DB:AB:9E:78:CB:E8:C8:0A:A9:8C:FE:88:39:5E:BE:DB:7F:20:7E:15","sha256":"0D:B8:1F:90:BF:A4:B5:3E:DB:C8:A7:15:63:42:C3:A0:A8:91:D5:19:74:6C:7C:C6:4B:BD:4C:91:84:69:37:3D"}}},"request":{"raw":"GET /plugin/info?language=en-US\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383955\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: d315801c1c510561a5c7ea1e9c6102ac\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ndate: Fri, 09 Oct 2026 16:46:24 GMT\r\nserver: cloudflare\r\nx-request-id: 60b92ac1-b0a1-4130-a608-bbe6fed44321\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47edc7b6a4e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4608,"size_decoded":2595,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2f9795e83dbc5eb95568f528bf92fe10","sha1":"8920a5d1e5b3f46c80e3e267ace8f60d85ecdc65","sha256":"34e318a131ab4d85b364d835a6ada2786913a991c5a00cf2718fc1bca4bab4c1","sha512":"1e2611cb68da6a8bb1f5f6927bee5d8bed73811ac63833c921f0f1605f4618b008c1ebaada35bb23b5ac89f51c01e561a4777739452c887c72a3dcf053971698","ssdeep":"96:CeKt5G4pvLb2Lz9Zys+K7PMttxZdL/H/ddFPFXZdSDHTlA3:hKa6qLz94spgtLZt/H/FyHY","tlshash":"8e914330a12bc923a29308a461ec9d116dda57b4c1cc8a54edaccd1d89fcceaa71744f","first_seen":"2026-09-25T14:02:37.25118Z","last_seen":"2026-10-09T16:49:35.97981Z","times_seen":7,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.605Z","timestamp":1791564383605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 850\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:35 GMT\r\nx-oss-server-time: 2\r\nx-oss-request-id: 6AC8AE5FDA989C3833B63044\r\naccept-ranges: bytes\r\netag: \"B328EDEF916CC7BF1FDEB389B5661D07\"\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1234926626382590416\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: syjt75Fsx78f3rOJtWYdBw==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: VG04v7_R_SUWXKE7f82_4KTGQuxdlNH1cf1UivuRELjc0mHnXupqHA==\r\nage: 27648\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":850,"size_decoded":1565,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b328edef916cc7bf1fdeb389b5661d07","sha1":"be897a337114691b10789de7e814644c5c4cc493","sha256":"55a9f80e9b3f418f07b8b7cffac25b6dfa971b690da09234545508356fb8cc30","sha512":"dc48c85326afb5b2cb99df0fd5b3ca139acac8e3e6eb1f41f40162c4993bec33f39e7f2ff0d7a55a1f350a2d669af2a531755a8fe653762e006613d5f5c7daa5","ssdeep":"","tlshash":"1a01ce7eaceb30230012243a365b24287579a63711c45d8cfe8d0be44f01d384634f1c","first_seen":"2026-09-18T05:08:27.131411Z","last_seen":"2026-10-09T17:50:40.76783Z","times_seen":89,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/fonts/DINOT-Regular.ttf","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:20.434Z","timestamp":1791564380434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ktxjp.cyou/assets/index-BoLUGZeU.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:20 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6abcb145-b6ec\"\r\naccept-ranges: bytes\r\nage: 2403\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHipuwO%2BmLUHbXsre53TBP4Z7m16vVvmbNuyyFfMV8Fw0TnvnksI7lAxlBJDiKFh1IMQUznZKy0HJFdxksUbcN4kdi9USOfWkfHyBf3iSy5yMN59sm%2Fgb7Xx%2B%2F8U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc61ba97b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":47537,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-10-09T17:22:19.329849Z","times_seen":404,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/platform/ktx/config.js?1791564381277","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.280Z","timestamp":1791564381280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /platform/ktx/config.js?1791564381277 HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:21 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxnoZMip4mWDtoUoObA5xT7CNEhSdZHxWg3L4NEBHIh8fTCCr1ghUZKjXVr1rGZfZ01nIawEB4xKaEH2c97H%2FJFOPPEs1msZgRHnKMHKqIjpixFI7VhuSnCgQ52z\"}]}\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6abcb145-266\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a47edc66fb6eb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":614,"size_decoded":1030,"mime_type":"application/javascript","magic":"ASCII text","md5":"35a012ae8d81d4f978afa96a735a4ca3","sha1":"6b498d275dd8ca8ee2443f5eecb6d1561020582f","sha256":"60aaf2b1aa7e0f20404386bb4a25ea05bb7113ed9e49de9aaa66fa920f5b516f","sha512":"4cb18e0fbac5c2b45bd10161cf98d215f82cea756615f8bd0acebba4c040662a0feb6703887db4738e504e6bb1ced97d2eaafe525252aa51380ad2c28e0a2c13","ssdeep":"","tlshash":"2df0425b74702e5639405a1c82db696072161477cc2e3608bb54ad087f9f92fb7b009e","first_seen":"2026-09-25T14:02:37.265508Z","last_seen":"2026-10-09T16:49:35.874898Z","times_seen":7,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/icon-428.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.558Z","timestamp":1791564382558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/icon-428.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-1bd\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDRpxuws31zgUAoCOt5%2Bop5i5AA%2FLJQUWsJOvbkD3tnoHyCcnIgKc2FR9%2BIw20jCLYTRJeespUGELcfKJ0BLooGKYxrepfonbvWbVnx1IVpLWDAw72l9uPUMbube\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6efd28b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 445\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":445,"size_decoded":1131,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"71a0dfa5243d8dba8dfb9977f5201752","sha1":"dd7e8c2a2c05f0db0462140c971161d40bae8b9b","sha256":"3cc8888abaabc5ba377b8e1881d1ae4392f6818014b18a850f094d35423f3d69","sha512":"a5b648ccfbd5bc17f741057cd354fee2972a0c5f6239a7180a19113a1066aa40720e96c6f1ec2f622374a30332f802631e722b90b1abfa957ce5fd41a8ad2ac1","ssdeep":"","tlshash":"ebf023f7c38610fbd82d4529571353e2867f295d3ae06249fd15d0101cb688d7730f16","first_seen":"2026-03-05T18:43:11.162156Z","last_seen":"2026-10-09T16:49:35.99944Z","times_seen":21,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/top-right.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.569Z","timestamp":1791564382569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/top-right.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-47d49\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CQKQC8UZh0c4V43vWbmSU5YIaswFHPMM4OVhcpLNAWaGw7PT48XiXnhBK1LH0JQAUD7XmG64mgLGQZfmCyG7Cyc2hP4PjHGiDLhAGGkJXlHUS37RFvzJfqgtX9s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f0d37b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 294217\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294217,"size_decoded":294902,"mime_type":"image/png","magic":"PNG image data, 756 x 764, 8-bit/color RGBA, non-interlaced","md5":"0ef2383681d9a18a952a741500ec984e","sha1":"eb597a76a4cb9eaafd461a67f750135ecad70dae","sha256":"d2b9748437526d4d70bfb4d04d07637f7cf74fdbf9851bf0f4461a7b58c9d727","sha512":"9ad794e4640394cec309115ea0ddaf588a836352a319167331aaf1adea4f0a73b29a8cd3941e110ca039dc2144a6ffbee36663fb8e512147a50aef5566996ae6","ssdeep":"6144:g64sk8xT6SX1ouAlyTQ8af6IKbeEaN/gysZJLLLapyO:j4Oe41gykTVN/gyp","tlshash":"765413b12c79f260ab4b2d3362a85d2e2f7080636a1b645db1f4f1178880afdeb11577","first_seen":"2026-03-05T18:43:11.113336Z","last_seen":"2026-10-09T16:49:35.876115Z","times_seen":21,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/icon-622.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.571Z","timestamp":1791564382571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/icon-622.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-260\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQr7v36GJaad9209%2BYKmqL0hyK009UmEgzz43Rz2F3Ex3X9%2BtbUDghDZ12NzQ8B5Xy2PDwUZ9kwx1YGvyamd6uWfjhhNSF6HRVJTQSeW5EhDtGYblB%2By3mQVcrtz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f0d3ab50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":608,"size_decoded":1294,"mime_type":"image/png","magic":"PNG image data, 30 x 29, 8-bit/color RGBA, non-interlaced","md5":"ab41fbce06574224d5f17108ffb796f1","sha1":"f0d024ef45d14434323b37666cb55c066998e41a","sha256":"70fc263165d9261f3c51b74b5a09c9ab5009c00237d36a8cf0085f2ad2a03c53","sha512":"db9a4cfc68f86d0907d4d9efe5245797cd289f4957682b9cd6dac548fb6603a63331e0cfe53129bf31e749cac6c627aad87a27676c0b657248ac210592027a7a","ssdeep":"","tlshash":"02f002ce8916b4e696aa117668ff703d726b7f4d460b7108edb29104be83545b908242","first_seen":"2026-03-05T18:43:11.14792Z","last_seen":"2026-10-09T16:49:35.937093Z","times_seen":21,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/usdjpy.png","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.215.220","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.840Z","timestamp":1791564382840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/usdjpy.png HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: v6qIMFPu6hKBOB+m+0FIEAtu9Cw96qOJn95im7HNSVT4p+CvXaKWyaIsH1XNyrqcrMPTgE5tzDA/5GqYUtYLaveTawoMYqh5\r\nx-amz-request-id: TPTTCWQGMG8A7V3X\r\nDate: Fri, 09 Oct 2026 16:46:25 GMT\r\nLast-Modified: Wed, 27 Aug 2025 10:02:14 GMT\r\nETag: \"277cd870eb6eb231d225e1e742ae097c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 63f602b9a66e8c0ce42d4f90e4a2b6b3d40bcd32908d50d16c1530f01d7075d7\r\nx-amz-meta-s3b-last-modified: 20250827T183439Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 6504\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6504,"size_decoded":7061,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"277cd870eb6eb231d225e1e742ae097c","sha1":"9ac1a9582f8055f1bd8a4bda7a4a910509c09fc4","sha256":"63f602b9a66e8c0ce42d4f90e4a2b6b3d40bcd32908d50d16c1530f01d7075d7","sha512":"68412940cbf1e0a24a3d916de4e0af89b263078b9664a1329e2e03a6632129772062896cea06a766fe8ba82682db6aa734beecb9888f3358fc2dcef29e88f940","ssdeep":"96:aG3EyXjFxiQu5OEfN7MlkRxrccOC1g7REXbis+KKviUMRtlz3yQbUOq84JWWWW8:aG3rZ4RF7HRCG2RdBGLzCQbUZJWWWW8","tlshash":"c7d18c98a739c9b7f02fd5442752e3374614605e87a4f3de81e29826138d2df45f70c6","first_seen":"2026-01-29T13:53:52.964741Z","last_seen":"2026-10-09T16:49:35.883224Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1529,"timings":{"blocked":-1,"dns":3,"connect":249,"send":0,"wait":273,"receive":0,"ssl":1004},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getCoinList","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.283Z","timestamp":1791564381283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: \r\nlang: \r\nContent-Length: 20\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"{\"allowRepeat\":true}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AZl9aH4pFu7oHy%2BTuWN1ZAczniaqMhNmliD%2F%2B0Xz0DjfgtgSnooVBFrLs%2BKto%2BdzURyZ9oTvIGMEqY9S3dvSqFfrnZ6Pm9GlqGcIduFmjxTfvI4svA2yXb1bdLTCSsJhw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc6a1ff456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43887,"size_decoded":5399,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (43871), with no line terminators","md5":"d32f126abf985b118a9eb1b20215a405","sha1":"6337ee93453d0b1c5ea850d2b9fbfed34250dd5f","sha256":"417f9ae440077d750fc19a46380be2c72e68f1bccd52a61d16a7f1f53d218eda","sha512":"595e903d55cc55169126e79bd7e8797f2a3877285878d0b762e39fe182b7a5c96aa0e3d5139fb76417317cb25ab7d74b5f63adbc697acbcf4856051a61b0fcad","ssdeep":"192:RXEycXzvXPGVmXsGXaKXstXytXBXGIDX0k9X3ddXwMfXe2XHzX9cnXJaXyQXK8rn:IWqSVgFZuGBjUeQKNmGB7OCn","tlshash":"db13ff55452899bdc979e0d11faf3d27519c36afacc68d27d3dd8d888ed0af0260af02","first_seen":"2026-10-09T16:49:35.234128Z","last_seen":"2026-10-09T16:49:35.234128Z","times_seen":1,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/notice/getAllNoticeList","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.194Z","timestamp":1791564382194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8VpoDE%2BFoFGxNLfGA6WozP4gDbEoOijZ5LANKoVioiCuyYbE7YgRHVtX3ffEdUbkibCv86tR2RtpdPQvFtJEL4Dtn%2B%2FTac0x1QobLw8VSlRshhXOQphdC%2B8BrbeCzHxhg%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6cb83b56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":715,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/icon-618.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.563Z","timestamp":1791564382563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/icon-618.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-2c8\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2WxXvQ6UYwV41%2F%2B2km%2BaXey9zaIH3lLxSWTJCeZJuVq7eqol61XWZrMsiCwxiU8x0xG83s5FGeErQrE7uyJbgDgbDLWbPRkKrs6WUongbMSaDBliL5Pi43ub1s4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6efd32b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":712,"size_decoded":1398,"mime_type":"image/png","magic":"PNG image data, 29 x 25, 8-bit/color RGBA, non-interlaced","md5":"1bb3596c80cfe8a49e06c109bc35fd20","sha1":"0e0410e2951037364a07037374c66f12c065554b","sha256":"0b3d60813e28963111dcb94dfe9206d5ed509fa6e16b9c9df35a509027c45731","sha512":"044f39d2bf82ef8afddab4c15fab4fcac9ffc2a6631b903d79d80e4c2f383291d4905bec25e23753c48c66d420ade96142a7b2343a427af3864bcf7ece472027","ssdeep":"","tlshash":"390194d70d6190f340288f29d385e398e8471a56d01426443ca6a8064d74209eb93fd5","first_seen":"2026-03-05T18:43:11.202731Z","last_seen":"2026-10-09T16:49:35.967579Z","times_seen":21,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/HBAR.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.894Z","timestamp":1791564382894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/HBAR.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2959\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:56 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:22:49 GMT\r\netag: \"0e3174571262658f0033c46f013b26c7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Gl62YjHJFgdG6wPmZif1QLEqGJOUdvlw\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: sNur8YawPuBqLu-lgBdWIn-J57c8UURuGOLaVMvwiu8yNJXp_sxkPg==\r\nage: 14307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":3534,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"0e3174571262658f0033c46f013b26c7","sha1":"59777997e75bd2d7e326094605836437e155cc86","sha256":"f0442eea43b2b788d523f0ed5c226bc2edb51fa3066c5682a020e256facf3010","sha512":"a14bfc010c3b99f0686588d9622f3a13bb80b8b816ae78f76453a245ae236c932e867ba06bb85150d30a4bf6e48a2d64d01db7f06b8c3ce81dea25ef99376086","ssdeep":"","tlshash":"e3516d925e588055f6a5715891df64c5bf5fba323e83eca618f116d028b3a48b35e500","first_seen":"2025-07-06T22:01:43.234066Z","last_seen":"2026-10-09T16:49:35.896432Z","times_seen":144,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/TON.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.896Z","timestamp":1791564382896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/TON.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 8434\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:48:36 GMT\r\nlast-modified: Fri, 13 Sep 2024 03:37:43 GMT\r\netag: \"3ec9b79f8ce355d514d89957318f2682\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: GziHxCR5imJCeE1ac.8gau7FGImo_sdH\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Sc5kN-na_TlEwYkyUNjMRNbQq0VFyawUPxwtgSwi9-ZhcY5TtOOetw==\r\nage: 14266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8434,"size_decoded":9009,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3ec9b79f8ce355d514d89957318f2682","sha1":"6b4fbc8a17cbd0684416363e2846b92e81b12bdb","sha256":"e6c7988f064b561ad345a846c00b118d563305763f853d3f2bda63b5c745e714","sha512":"27af97fd9799f6aeb098531399b8fb88c9b9eb2643be8e79b518d1d7211a4c5490813b21c9c2f300bf702432d90ad6291a1edba83c4e501a92aef816e13ebe9b","ssdeep":"192:wd9fWTbtg7VJtpYqxzk4EunA8HaaHBQxG5btlozsvc1ecO4tH6sao2z9q:wdZotghJo4EC36aHBQxG5b/ozIcgcO4j","tlshash":"7f02b02316bf69bcf119dc9b48a48d41ec4102f55b8fa6d1931850ba03a9bcf2c975b4","first_seen":"2025-02-26T18:31:17.525824Z","last_seen":"2026-10-09T16:49:36.003422Z","times_seen":118,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=96fd284370201b526cc3b951edee033e\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383964\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.975Z","timestamp":1791564383975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/station/log?plugin_sign=96fd284370201b526cc3b951edee033e\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383964\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 345\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":345,"data":"data=0qHafQ8hMhHKtTc8f5KWB9w403E8BQImPSDWyqFhBdHvP9a%2B1nkhMhHZtT%2BJfdmA0nzayh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyGYptntEPVzErdyiyQfjrQuK15RhBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhyh8htnVvyAKhyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:46:24 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nset-cookie: ss_uid=26b09fddc58b937ad10aca8435e7f46c; expires=Sat, 09-Oct-2027 16:46:24 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47edc77ff56120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"26b09fddc58b937ad10aca8435e7f46c","quoted":false,"path":"/","domain":"salesmartly.com","expires":"2027-10-09T16:46:24Z","raw_expires":"Sat, 09-Oct-2027 16:46:24 GMT","max_age":31535999,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"ss_uid=26b09fddc58b937ad10aca8435e7f46c; expires=Sat, 09-Oct-2027 16:46:24 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":812,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0503862fd87dcf77b231c411f55b62f1","sha1":"3f966e676d6ec4eef0aae6e57cc147124dc21bff","sha256":"61ebcba759ec9067b4ff0e60c1ff331290d72a34f43c5165376dc08583eb5bd9","sha512":"6d9559a0654e8bedf97e4642c30a05385df1842f4850b46039bd63a0e578d0671e3c8f4ab8631726263472e05546b2ef4788a395acb798a2008e7246aaf45f11","ssdeep":"","tlshash":"deb02413143c43030d41550f40043700d55035d01d15473fdcfc4310531c047ff014d0","first_seen":"2026-10-09T16:49:35.124649Z","last_seen":"2026-10-09T16:49:35.124649Z","times_seen":1,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/vconsole@3.15.1/dist/vconsole.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:19.983Z","timestamp":1791564379983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /vconsole@3.15.1/dist/vconsole.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ktxjp.cyou/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nfly-request-id: 01KZYYSJJ9W5XBBAKB4KMF04WA-fra\r\ncontent-digest: sha256=:NBiF69Hbn1eFFOhieaRJwKaYvogm2UlBgI1rVWKD6hY=:\r\ndate: Fri, 09 Oct 2026 16:46:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a47edc5edcbfb28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 4558363\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 09 Oct 2027 16:46:19 GMT\r\nlast-modified: Mon, 17 Aug 2026 17:07:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286369,"size_decoded":79055,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64795)","md5":"cc72ae9898f9bfb7b300dbf33a738902","sha1":"cc79a9522ef457188c18283228b2b8759b7faf1e","sha256":"341885ebd1db9f578514e86279a449c0a698be8826d94941808d6b556283ea16","sha512":"e39af73dc41fc13ebd886d41c0638e64a8cd2832254f87e9f00fdab879680006a33f4fc75c514682d5f68c765521f86399a5dc5d54d14a51aed4e49a8cfee0cd","ssdeep":"3072:z11iHWXsqRBvkeoTZY3bN+/WwPKgLfERrSmBtVVR++sE:TOWX7RZN+/WtKM9+w","tlshash":"b95409ccb2c2706552a374f4516f240ef37bad44780b8098b63ad8d26d7ca4e61a7f6d","first_seen":"2023-07-04T08:13:02Z","last_seen":"2026-10-09T17:22:19.379213Z","times_seen":242,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neweasset.s3.ap-southeast-1.amazonaws.com/3/svg/yellow/searchDeep.svg","fqdn":"neweasset.s3.ap-southeast-1.amazonaws.com","domain":"neweasset.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.552Z","timestamp":1791564382552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /3/svg/yellow/searchDeep.svg HTTP/1.1\r\nHost: neweasset.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: T0VDEKNFDNKCPCDF\r\nx-amz-id-2: XPz3iZqT4B/XvbAAx/c1lieITG6iVVdzvWe+IuOlNVVzkrjNSM7g6pcREHTvGDdd30LVA5txku+SFkyEVUpdnDTzXrjooSMe\r\nContent-Length: 820\r\nAccept-Ranges: bytes\r\nDate: Fri, 09 Oct 2026 16:46:23 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 13 Oct 2025 08:38:03 GMT\r\nETag: \"103f5351870cc5d4b49188a5d241d7f7\"\r\nx-amz-meta-s3b-last-modified: 20250602T101706Z\r\nx-amz-meta-checksum-sha256: 0dcd720344bc82130b44ba2e24264ecafa5cdbef047289f5ca1d532aae3ba2bc\r\nContent-Type: image/svg+xml\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":820,"size_decoded":1380,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"103f5351870cc5d4b49188a5d241d7f7","sha1":"0771673f8801d3d51c03db354368b65462042da9","sha256":"0dcd720344bc82130b44ba2e24264ecafa5cdbef047289f5ca1d532aae3ba2bc","sha512":"7269cb2cae9deda3e6e83884640c83f713c328b09e2ac59bb8a075795f8c4279a84cbde0a1ddba5251628f6456b2e6554eb8f13c0df2daff004721f97f08b7c0","ssdeep":"","tlshash":"2001ce8c779449e5442d5fd2c77d9147310eb8df888251acf0c1d450d1608bca7229ed","first_seen":"2026-02-01T00:50:34.410008Z","last_seen":"2026-10-09T16:57:30.535215Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":3,"connect":263,"send":0,"wait":284,"receive":0,"ssl":534},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/icon-429.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.560Z","timestamp":1791564382560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/icon-429.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-3c1\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjKXGpxZ%2FQdy257BRQPh3llNWEu5YRAo05W62QV5qzDt0QgcM3dZD8B%2BioNagUb8GNfoSoE3%2F9MaCyY%2BQpnZPJS%2FZnpU%2BkVYrgv%2BruBeC%2BXtcFjzJBVWVgeF4Csz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6efd30b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 961\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":961,"size_decoded":1657,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"05f7b99f81ef08ca638edd2bec85e4b9","sha1":"4692707053719498b02e6185bacfba60bc9ff4dd","sha256":"1d34174453009c0cf37cb8a926aa52b8dcbbc689262ed97a6af3f217b125d73b","sha512":"efbaf38a5f7d6edb81de24223afd3b336650cc42c20dd867f45d85781497b558f3cdeb1768dc39d6c002cec9992d81adca7f8aa4540b2efa9f5c7301c52a8f5a","ssdeep":"","tlshash":"8d11c8ee3d9a09fafa09040b550a7e68b0cb0d610148e4099e9574b9ef785c5130d757","first_seen":"2026-03-05T18:43:11.125845Z","last_seen":"2026-10-09T16:49:36.032845Z","times_seen":21,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:46:18.947Z","timestamp":1791564378947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:19 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 30 Sep 2026 06:50:51 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTIReGjRqYj97o6ElfHU96YZDzdlmoVJKpXt4ZrJGbZnJ17%2BQmMqQLJz%2BZo%2FnERJkbpuGcukAEzqhuiwlP3dvZb5V1wrQnes6QcAHEJ7OelARccK7ez4hSVj1OVw\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47edc58cff8b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3761,"size_decoded":2098,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1484)","md5":"fbf6240ceb4f7f6b36b6f58a3f8f47c5","sha1":"5b6d3dac4fc5c8a2e34efc4e47f6db1dcf4e21de","sha256":"2a4e4a1c9d139024a72ba12c2bbbb9b9c4db1835c44cf6ce93a3315f4623d0b8","sha512":"6009202a7491950d8cc33fb10d6da37d666f87ad28ef29812b25415636ce38e2cee5f43cf3aee229231f19992e881e24ce8638171d5487a6c573bec78c61c840","ssdeep":"","tlshash":"c3712fb30da69c1927669235dfe7f4488aa060c7921db828b4cc81eddfd1f9188d73b5","first_seen":"2026-10-03T11:59:34.058831Z","last_seen":"2026-10-09T16:49:35.906794Z","times_seen":5,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":27,"connect":25,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/assets/ja-RG_9k16C.js","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.239Z","timestamp":1791564382239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /assets/ja-RG_9k16C.js HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZkdxvCPSP7Tq%2FK3iN6yJY9805izjZgqh8zEPEwH%2FFwZZewQCkWkMAQ886CzDcmV3EA88MmKaOLvg40o%2B4rqHdvljBXmdQ2VEfCr0eAhp8GLn%2FuMYQPopNeyxP4v\"}]}\r\nlast-modified: Wed, 30 Sep 2026 06:50:51 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6abcb14b-2f607\"\r\nage: 2403\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47edc6cfcbbb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194055,"size_decoded":61607,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (30890), with no line terminators","md5":"2b1d5bd569463e9bda97cb2d1336ab15","sha1":"143cba2291c3b119c7ff5f56a905b594bb480f7e","sha256":"d9eb95a7672ae9e016ec543106192bc0361287429388494abc5af6f022f5a708","sha512":"2dd0d9e114ead5663357ae53dac653ec5b047b51fae2ca70018ab15e0fc66f9f36d42f0c6a2f78acc5914cef89f00cd199ec5cf5091baadd5551aec714b75d16","ssdeep":"3072:YQD/RImTacUC19ZusjqrO3U/eiuCtuaYuW2M8/6bNVEsjD+ET3KbWzNED6VlxMGj:YORIdcUCQsmrPeihtuwW2OdOba2wlxM6","tlshash":"a5142a8ce75ea63494672663b66c64ca10688c47f4a1df768aafddd08780b4ef703c74","first_seen":"2026-10-03T11:59:34.143972Z","last_seen":"2026-10-09T16:49:36.023014Z","times_seen":5,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/icon-621.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.568Z","timestamp":1791564382568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/icon-621.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-226\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVvdzN%2BzFAkT3f5rauOQamLHynBJLX9cHCyRRfpdpcuC5MpKuUv2QwqVIyWig9vOHSXkwbzcWU9AP%2Fl%2BAzpf9%2FxzNi8gNBJeyLwQ5WKrewzR4ejq64WYae00mSq%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f0d36b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 550\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":1240,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"1738615eae5a0cc8419432d994cb9fb4","sha1":"132e8b8324bc33acd53b9e31b6ac2dc5d9fd61cf","sha256":"daec6f7a0ba848d88a2fb66ea2098adf9fe10073cf560dc53eea5b19b20d7a4c","sha512":"2c3f7a07ab91edaace41febf2e23817d2690d16c82056102763c4fc5dbf5b2fa73feca0c384b0adda724cfddbdd61851c529055db540e37d9522cfa47144d174","ssdeep":"","tlshash":"09f096d7cf8cc4ea6bac418640b7753574b35f07190301bce0b1107c584f012019ebc2","first_seen":"2026-03-05T18:43:11.215917Z","last_seen":"2026-10-09T16:49:35.975766Z","times_seen":21,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/icon-755.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.572Z","timestamp":1791564382572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/icon-755.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-1f9\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFO4ft3MxK2sYhwCc5OSRgIcWweZZnEkwlPA6qwhp8ijKpvI%2Fljif7yIiUCNWzxx%2Fy20lK1d74CwXpgR8IGPnXv9yW4tx4MQIpzJcnANnnFAesmYj55er%2FhzhkC%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f0d3bb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 505\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":1195,"mime_type":"image/png","magic":"PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced","md5":"fa4cfba71b0d6ffd4708f487d519f1ca","sha1":"411497b1d517305a4de57f6af313b0ae56984107","sha256":"637c724c5e59cea5cb64d0cd013d8ddc77c3780c107a422aa3e4330d98e13043","sha512":"ab40e45a0466dc69296067db6be2df6ecd0a75d61f3330de3629c41655170de3f6e474f7cfe3ed4fcfd37587d95bc302ef16778059d7df7f19377cc4b33297be","ssdeep":"","tlshash":"a8f005dd7bb3183a7a4f2a7d65460f04186b47095519551e581245d54c46d4d1194151","first_seen":"2026-03-05T18:43:11.189394Z","last_seen":"2026-10-09T16:49:35.945931Z","times_seen":21,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neweasset.s3.ap-southeast-1.amazonaws.com/3/svg/yellow/icon-plus-2-dark.svg","fqdn":"neweasset.s3.ap-southeast-1.amazonaws.com","domain":"neweasset.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.581Z","timestamp":1791564382581,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /3/svg/yellow/icon-plus-2-dark.svg HTTP/1.1\r\nHost: neweasset.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: T0V52E3E17G4DR80\r\nx-amz-id-2: ERrXPRiOVRpF0JH+FoMotQ7+8tq1jSIMNe0s16wi1HcIbnx7GzotVXeLgJ/8KVQXW0MpfXBEjWkT9K9ITz5Tw+MYI5Xu0H6A\r\nContent-Length: 1159\r\nAccept-Ranges: bytes\r\nDate: Fri, 09 Oct 2026 16:46:23 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 13 Oct 2025 08:37:25 GMT\r\nETag: \"00b5a26cd61e245753a077e05b21f368\"\r\nx-amz-meta-checksum-sha256: 81bf559041d5a994915fc8ad4cfdf4d0c063d5d987912afa845ae7337c0e96ef\r\nx-amz-meta-s3b-last-modified: 20250602T101706Z\r\nContent-Type: image/svg+xml\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1159,"size_decoded":1720,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00b5a26cd61e245753a077e05b21f368","sha1":"d5e1e2e904af80744688bd2edb67cdea4adbeb9e","sha256":"81bf559041d5a994915fc8ad4cfdf4d0c063d5d987912afa845ae7337c0e96ef","sha512":"fe7b0c012f5140b80edac899a249faac206ddf3ecea802780c3634f51b88e947a64d5b8cb39c881c19577dd48e1454ff3a133c57986f41167e88ff51fe13a5b8","ssdeep":"","tlshash":"062126ec718d57e09e145fe8c850e1e497b27a797d82831f84d7fcb2a0e105e4198dc4","first_seen":"2025-08-02T08:37:54.338176Z","last_seen":"2026-10-09T17:22:19.352332Z","times_seen":117,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":-1,"dns":0,"connect":259,"send":0,"wait":277,"receive":0,"ssl":529},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.polygon.io/v1/reference/company-branding/d3RvZmZzaG9yZS5jb20/images/2025-04-04_logo.svg?apiKey=zlo3erv7EWJCAHbYFkuN7p5xUH6aeQan","fqdn":"api.polygon.io","domain":"polygon.io","tld":"io"},"ip":{"addr":"198.44.194.57","port":443,"asn":39979,"as":"POLYGON-IO-NY5","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.842Z","timestamp":1791564382842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.polygon.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 15:57:22 GMT","end":"Sat, 19 Dec 2026 15:57:21 GMT"},"fingerprint":{"sha1":"14:C7:84:4C:D1:EC:1F:32:F4:18:D2:C8:F5:35:9D:A0:1A:4D:B6:01","sha256":"FB:DD:3D:BA:D1:12:59:48:21:FC:4B:3A:37:B0:41:FB:4A:DC:CC:E8:4D:42:81:7E:18:0B:C6:21:96:42:67:22"}}},"request":{"raw":"GET /v1/reference/company-branding/d3RvZmZzaG9yZS5jb20/images/2025-04-04_logo.svg?apiKey=zlo3erv7EWJCAHbYFkuN7p5xUH6aeQan HTTP/1.1\r\nHost: api.polygon.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\netag: \r\nlast-modified: Fri, 04 Apr 2025 17:23:00 GMT\r\nvary: Accept-Encoding\r\nx-polygon-cluster-name: polygon-ny5\r\nx-request-id: 3bb278e24dee079beb23f826765a3bfe\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4705,"size_decoded":2619,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04fad94ac0dabbcbb72ee0576ab76a0e","sha1":"8b5e1a8354d80f02ebf9d0f0c1c1c90abc847536","sha256":"1a259a8cd149e4bacc607f119b57cbf76ed71b4337424cb19cd9b6dada2d5d26","sha512":"c2429aec95a6d0e3c1ab13cf89891b36fbea971da7c1b08f6ce07cd3e4912d11b0c5491611b66b4d6c58a1d6e0f248f9013ae8469e5786a3c809ff61310a86ee","ssdeep":"96:+20+7S4svSnJO/lUSiE9U3QAYOh51BEK8aXrMzfewJi:X0+FsvSJOdCgvOPTbjILj8","tlshash":"2ea1b6dd23f456d824ca8f5eef372cc42a1f30ba3a618582702ddd496b82ac9d106c94","first_seen":"2026-09-25T14:02:37.219333Z","last_seen":"2026-10-09T16:49:35.916588Z","times_seen":7,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":3,"connect":87,"send":0,"wait":93,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/BCH.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.881Z","timestamp":1791564382881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/BCH.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1218\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:55 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:22:04 GMT\r\netag: \"d34183db66626408066857b67f7900d4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: _v1YgANItK0An24NLFbR5z3eghYpVIHN\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: KGDmOq7FHgw6XUlk9nbNTD-ZL1_e2Ur5ncma9mIT8pB9AXPVgACeJQ==\r\nage: 14308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1218,"size_decoded":1867,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d34183db66626408066857b67f7900d4","sha1":"83c65e97df3ff99ddc360cbb4f00e0aab9b46157","sha256":"c62e4c60cffc895ab8c244858fe3e536c8951cdfe3424e5af1cd6d92dd796c8b","sha512":"7ee53dd7c95dd200c67ef1a94d0a658cc28e6681bb7e9b80f25eda71cd907a57f11cba0074b512f7c554ac84364439cba30d0b0706b1d2e0b0d102fe045b5d05","ssdeep":"","tlshash":"6421e7a0a34da662fa3b2945e79700f0712a5431a90659974af74124c21c9462ac057a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:15:27.951791Z","times_seen":402,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/SUI.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.892Z","timestamp":1791564382892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/SUI.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 5321\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:56 GMT\r\nlast-modified: Mon, 12 Aug 2024 11:52:52 GMT\r\netag: \"e243d03f847e04a3bcaf9238d2d79587\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: XxFuErkd.BHkkSHPdCwVHA1M42.o_n0C\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 46uwtXi2bm2lIuhfWzukRjNq_TJm5FFUnMln0cPO-XpIkEtaOdBTzg==\r\nage: 14307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5321,"size_decoded":5896,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e243d03f847e04a3bcaf9238d2d79587","sha1":"badc33000a29d7c9677f95c4155a49609eee722b","sha256":"786590835f83f15e22d1d73a2147878b00625e91912ca04e8e0c6775c56dea4a","sha512":"798f634225925aa9e02d11634c010de038d70b0fa197ee014443ae9ef782f0a90a35b18a48ee4f417380acbc8e1c9df2ded77ddba10c0fa7d1784f28a3fbf013","ssdeep":"96:dmY//imlSbkkYlFPTQOqidjRGZRIMHp/k7uOrNiUyrcMUz:8Y/qmsIP0OqiUhHpMFrkc/z","tlshash":"c1b17d106cd0e052d9ebcf9ea6959e736072cd5a5c0ae24d3a08e3262f7f07c42e90e1","first_seen":"2025-04-01T12:16:01.548942Z","last_seen":"2026-10-09T17:15:28.004938Z","times_seen":255,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/mail/listByUserId","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.661Z","timestamp":1791564382661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/mail/listByUserId HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePjmsSoiBkcxbgnfU7bfKFOEI4vUAUQh4KXf74N8tKXHWmp%2BpbzgugRixsus1pYWVLkAiGC3QktkRnC2sMm5jF88FuUDleFPWLNLsHpoU6qhwLl8o%2BhgE8TKkK7AP8jTLA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f98b556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":711,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/XPD.png","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.215.220","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.853Z","timestamp":1791564382853,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/XPD.png HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wIunDQL90cQi1AP++MRR+gVyBnU4cn4baM5aspBjvdeatpAOd3iQM2G4unxUt2YbWdRDC6cBIpqxLKpT9ypadY+o2ssVrOf9\r\nx-amz-request-id: T0V3K1F6ADA4S833\r\nDate: Fri, 09 Oct 2026 16:46:24 GMT\r\nLast-Modified: Fri, 29 Nov 2024 09:33:38 GMT\r\nETag: \"5ddf3249007d4035852cba00eaa90f73\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 5eb147838a552047d164d05122dd6eab4f481495052ce40be1a992e579755e57\r\nx-amz-meta-s3b-last-modified: 20240718T030044Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 31929\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31929,"size_decoded":32478,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5ddf3249007d4035852cba00eaa90f73","sha1":"e4a409631b4457e9ce9820abf767e0ff711f2f63","sha256":"5eb147838a552047d164d05122dd6eab4f481495052ce40be1a992e579755e57","sha512":"8cc147d1c282d8d97018d6591d5d0f83efd85be11ac47c91cbfdb1ffc8f5ed2f2f23004ac9dd9ff2851fdc05905b8bc56e383bf287de6f1542e7f9a4859b150b","ssdeep":"768:ZvwBX263rPfFfndeMqki6gxXjecPTfhuVfqrauYVZJy+:Wpl3rPtfPq6RcVIfUFeJv","tlshash":"80e2f1d26599fc3b820769d2872161fd573b7202cbba2ed33437abf452b212d709d681","first_seen":"2026-02-01T00:50:34.417012Z","last_seen":"2026-10-09T16:57:30.470548Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1294,"timings":{"blocked":-1,"dns":0,"connect":253,"send":0,"wait":276,"receive":254,"ssl":511},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/one3.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.363Z","timestamp":1791564383363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/one3.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-935\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsxUTlWOJwhIXMRd2SWeD2CPZ6MSzConOeCRGAA8nRz%2BtbeBHM2lAJoHyabxHjIYfb0kB6GarFTU1sbMxsStapoNNKDlWDrH53cWgX96Qt9EZopphzoxSaRti4vm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc740e19b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2357,"size_decoded":3040,"mime_type":"image/png","magic":"PNG image data, 41 x 53, 8-bit/color RGBA, non-interlaced","md5":"958ed949af4737f115c8cf70417e94b8","sha1":"edd06f06c755aef6a58f02ecdef921a2efa43e99","sha256":"70695745a376342e3230da89ca7031aee798eb686825de18257349cac61dd6df","sha512":"7d2c191cee1aa266a353d4bb17f966a67e59f9ab9c6173b9550255aea59a8841b9a0e4efed829c6c774e3bb8a6a51008073ee9120ee5a86870712dc17e87a2ce","ssdeep":"","tlshash":"4b415d492e3cdc937a48764fc11e87f17a14117c562729b5d37610629a64e04cac079c","first_seen":"2026-02-01T00:50:34.403096Z","last_seen":"2026-10-09T16:49:35.88143Z","times_seen":22,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BXdNs9wM.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.768Z","timestamp":1791564383768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BXdNs9wM.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 15:59:12 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC90F505F471E3535854EFC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16066696494737045803\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: hQO6grCLjJmDdpakoAMYhA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: GInv08e3m6lC8D76cUKarBJF9Gs4ew6MzTA2vNwHAKVIBUQxmrgf5w==\r\nage: 2831\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":79629,"size_decoded":32458,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8503ba82b08b8c99837696a4a0031884","sha1":"43f5c5d00871958d73f78fb61f13317b7e1ce82c","sha256":"532d7c0a97bd72cfcf575b2f5bca87cc519773edc46cd25b7d148edca988bdec","sha512":"aeb3fe11bc6dc994a9f4567e73512b14bdabb63c213ef28002d52e6aa86ccc981f460f4e8ced55a94949b293dc66194dfa7d630a0a711722e7f345f4c473b1a7","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDm:fWYmahMqBDDAx/LANwntDm","tlshash":"757319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","first_seen":"2026-09-23T21:06:49.600983Z","last_seen":"2026-10-09T17:50:40.74978Z","times_seen":72,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.799Z","timestamp":1791564383799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 15:59:12 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC90F5094539437384ECA81\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16134971315845804156\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: VbsXXiLX6p8NP0gV+iTFeA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: FEwRFcRFzpLT9ygQLHfuzGfYOmALLC-KgidXU3bLqd1waOfniunjow==\r\nage: 2831\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109345,"size_decoded":39306,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-10-09T17:50:40.81561Z","times_seen":531,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mix-ads.oss-accelerate.aliyuncs.com/prod/project/g1dpxp5/p1_v2/integration/plugin/image/20260826/1787693127581/77777.jpg","fqdn":"mix-ads.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:24.811Z","timestamp":1791564384811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 20 Sep 2026 05:42:02 GMT","end":"Wed, 07 Apr 2027 02:26:24 GMT"},"fingerprint":{"sha1":"FA:C5:36:F3:4D:B8:AD:0F:8A:B1:F7:7D:B6:5B:A3:F5:2C:B2:96:1E","sha256":"8C:A5:7E:E0:95:9C:A8:DA:01:66:7F:8A:C2:FA:78:26:4D:D9:C3:43:F1:B3:3E:D0:1F:FD:24:00:10:92:3E:F1"}}},"request":{"raw":"GET /prod/project/g1dpxp5/p1_v2/integration/plugin/image/20260826/1787693127581/77777.jpg HTTP/1.1\r\nHost: mix-ads.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:46:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11201\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91A61CD3972A9E0E050C1\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"5F46631ABEF37755B0584F27F1946A8C\"\r\nLast-Modified: Tue, 25 Aug 2026 21:25:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8635939452874466875\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: X0ZjGr7zd1WwWE8n8ZRqjA==\r\nx-oss-server-time: 3\r\nServer: AliyunOSS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11201,"size_decoded":11765,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 512x512, components 3","md5":"5f46631abef37755b0584f27f1946a8c","sha1":"3860f66387764c7c3aaec76573d67f87bac681cd","sha256":"5b383ec3448d069fac1816edb07cb91d26c5a5ff2fc1572a70097d6efd841ef0","sha512":"f506b29989476b15cd57801882188d5a5fb227454b1e52deb0ea226c377e16c933f9fd6a52d911efb6c2d86472467dcbc119aae0bc3e1ebdcd166aadafaef6e1","ssdeep":"192:l//xyMub91FMG7+bXEvw4EavQaoypjpEHdmAxFH7Kz:l/IJ+Qvw3KpjpEZFO","tlshash":"08325b03024f9c63a185dbea7f2f3e44b7cd5a6c26173ac348160adfff59ad11899011","first_seen":"2026-09-25T14:02:37.207858Z","last_seen":"2026-10-09T16:49:35.96309Z","times_seen":7,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":0,"dns":96,"connect":20,"send":0,"wait":676,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/platform/ktx/logo_180.png?1790751050655","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.052Z","timestamp":1791564381052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /platform/ktx/logo_180.png?1790751050655 HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=6,i=?0\r\netag: \"6abcb145-e63f3\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2IBOc%2FpSWGyUL875ms3dSpkKRd79TPoXjPWEkQ5q3iEwVrERaJEfEfhNJDin%2FGA1ph4hwr7lHtkV%2B4JvXwKcTlgW8YAb%2F6fUJtWsAa5LqCqixo7fbZHSqp349kJw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc658b36b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 943091\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":943091,"size_decoded":943787,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGB, non-interlaced","md5":"51a00d3ffa8f3dd02f717912f6ec3f35","sha1":"13fceda00be7cd69ed0cbad91c39d61768200301","sha256":"75f908049cf06771a223d9ea84a24cd8a0951faa8cda015fd5bbf65d8d2ea81e","sha512":"e2fbded4ec2fb450493ab7b7f80c045811bf657285352ad9ce544b78ea07278b03c3a83e5340b54b40f5d8fba5cda7c8101adc71a35862f7d310d88ac150e22a","ssdeep":"24576:57shVia1QkAdSyD0K9JOTk1Ud2lIsZ6xKvmPZfLZAJ:uDia1Vhg1Udf7PP6","tlshash":"991523c4570921c1d8036dfac19f057867f12a588325a85270dfa51a8fbab0b73abdf3","first_seen":"2026-09-25T14:02:37.227226Z","last_seen":"2026-10-09T16:49:35.963956Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getMt5Amount?coin=xau","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.875Z","timestamp":1791564382875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CimoLvvGgPwWcULuR4v9byYVCuWEqRYBseA49jHROLSYmlWWVduquL7DgqSh3JzVUafJliOfAJX4C9UO%2FwdbUb466J4tMX5p1eZIMVsFwfRjn7TriID4z%2B0CujSQan2bUw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc73b95d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":885,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6b12aeece82bb13bdc2bbebe0de53e34","sha1":"4ed72939b8f222e9760062cce65842fc38a165ed","sha256":"c357a75883c737473c6010971daf7d60a7534de0794edea55eba5f1ae36ebc32","sha512":"d2a773b6d479f2417e0d1ae36091073851172d345f7cfaa1abc78cd1bbbb077258179d498eee6f52bebc112b86d606e052be99ee9ce193d870e15a83b7cd5b78","ssdeep":"","tlshash":"4a9002559c1c8682a8c300a5a91a12040124316226649a485c59912580885a36048c58","first_seen":"2026-10-09T16:49:35.278303Z","last_seen":"2026-10-09T16:49:35.278303Z","times_seen":1,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getMt5Amount?coin=xag","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.877Z","timestamp":1791564382877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sAP3V9qFfrXfGAPtOoEs1f054aXOOFa6kAExvreIteWijsCgkndJ7LcQSXK0EA2HtCv8A4B4l5Uudsi6WB%2BNu1QnGcAXcxmP9gZV1alj4Q5KqhfOjSKIVICHYlB2xv8dg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc73b95c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":883,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bcf8c5c40a74ad624321986490ca96d7","sha1":"31ca5704a33b6b4b69272b89bd122e2768598938","sha256":"ce3c8bd103bd3fb61ed1ecf9eb44c0c2fcf5a7356344702e66ac44b12c31e152","sha512":"d9bf6675ecc7e22acb305495859574721a73ab441e0ed68f4912263dfbaaf83e2d501dbb55716239a37d2d3d555bbd7282839ddba5c133e795a515a044a1fdaf","ssdeep":"","tlshash":"f09002575c1c8253ac8304a5951a1658002432a0263892484c6bd16580c81a22044c59","first_seen":"2026-10-09T16:49:35.283005Z","last_seen":"2026-10-09T16:49:35.283005Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/SOL.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.880Z","timestamp":1791564382880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/SOL.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 404\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:19:36 GMT\r\netag: \"5e22a9302a4383454bfe530f0ddffb53\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: .y99HULHsmBO8l5_Ll.XajXf2q2ZdJQz\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: AyDQskpJnpr9jHpy9UPuZj17vMQabKV41ZwR82d9fiZrEBWJiaoi8Q==\r\nage: 14322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1052,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:24:31.096643Z","times_seen":1220,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/user/getCountryCode","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.291Z","timestamp":1791564381291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/user/getCountryCode HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbMApvip%2Fo6VSv0GIwESH8YvDXcc%2BKp5iq3ijQn%2FbpGPyacTlX0dp7ZobX2T8KWKnacf8ggs62z%2BsrzO8IDiN%2FcygNwgyXTKQJYxs%2BtTCsdf1klDB0NglesuNT6GJ%2FATQw%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc672f0356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":723,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/bussiness/followOrders/list","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.662Z","timestamp":1791564382662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /api/bussiness/followOrders/list HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hr92YsL7ASmA1NZ1kGG3tTD9a3r7SpEskgeSh1lLpWC5SWo4%2Ff71nKYh%2FgQ6TZ4jpeE%2BRBICGCI4PIMkWRtz8%2BzxtyJw%2FuipBjck3zht1ioWDspLIdybIQLPPhilzNfl%2Fw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc7128f556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3432,"size_decoded":1807,"mime_type":"application/json","magic":"JSON text data","md5":"9a05ddb77a66e534f94d1a76920fe544","sha1":"346a37475081bc30b34049546946b5ac4d4a8361","sha256":"9c47cf460ca79eea83386e95d324d8e14cf758f3362a9e9e9df938e129ebe64b","sha512":"d72d6afb9cd994f64ce3c2d7b9bc607a69a636e5896b910c77398b3c71e569e182e42b0d04fd30efc364026af0176aa66a4b915712a505efd63b18e7aa2d6286","ssdeep":"","tlshash":"8c61db52fd3688d867aba5d1acea335766cd315f20d78fe024fcce244d9857a280e905","first_seen":"2026-09-25T14:02:37.233551Z","last_seen":"2026-10-09T16:49:35.886373Z","times_seen":7,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.polygon.io/v1/reference/company-branding/YXBwbGUuY29t/images/2025-04-04_icon.png?apiKey=zlo3erv7EWJCAHbYFkuN7p5xUH6aeQan","fqdn":"api.polygon.io","domain":"polygon.io","tld":"io"},"ip":{"addr":"198.44.194.57","port":443,"asn":39979,"as":"POLYGON-IO-NY5","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.843Z","timestamp":1791564382843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.polygon.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 15:57:22 GMT","end":"Sat, 19 Dec 2026 15:57:21 GMT"},"fingerprint":{"sha1":"14:C7:84:4C:D1:EC:1F:32:F4:18:D2:C8:F5:35:9D:A0:1A:4D:B6:01","sha256":"FB:DD:3D:BA:D1:12:59:48:21:FC:4B:3A:37:B0:41:FB:4A:DC:CC:E8:4D:42:81:7E:18:0B:C6:21:96:42:67:22"}}},"request":{"raw":"GET /v1/reference/company-branding/YXBwbGUuY29t/images/2025-04-04_icon.png?apiKey=zlo3erv7EWJCAHbYFkuN7p5xUH6aeQan HTTP/1.1\r\nHost: api.polygon.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4538\r\netag: \r\nlast-modified: Fri, 04 Apr 2025 17:05:47 GMT\r\nx-polygon-cluster-name: polygon-ny5\r\nx-request-id: 9948e29cf72c12f1f2529174d1938ad6\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4538,"size_decoded":4860,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"d5f2f45d2c3579b691870dac1fcb78d5","sha1":"255fd1926569673d5549364fe59716cdab1008af","sha256":"77969c30d24a10524d90348595bd34b9d90f2dc7b5116fd20c4cfe23b0662ce4","sha512":"ac734b81f8fd2fb53e55e75c7982964cd6abe5427d9f72e36ecdadd735bc7fc3168a65e3ee6b98eee232001ad5611d6b4c640f18ce4339f001428a71b7e39e0c","ssdeep":"96:5S8LkJvUtV0NpB6XnBGT4hUfimCpa+X3uwYTnq8oxiTj:5S+kpUtSpB63B64K6Paoz8F","tlshash":"b3916bf682d49c8bdcaec636c0c34bd1d2b7052d9bc2956d419bd5240e76095fc794c7","first_seen":"2025-12-02T03:08:10.425893Z","last_seen":"2026-10-09T16:57:30.475595Z","times_seen":144,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":2,"connect":87,"send":0,"wait":118,"receive":0,"ssl":468},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/AVAX.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.890Z","timestamp":1791564382890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/AVAX.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1110\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:56 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:16:25 GMT\r\netag: \"155f85dfe1fe971302126e81ecbeeda0\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: FzBMwKZlMCUleZxgT34urtbzB9Ph_8HG\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Mpy9Zby_QURu7rxayJ5W00zTEmigvXJxqMHV6c3-est54EN0zYtSxA==\r\nage: 14306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1110,"size_decoded":1759,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"155f85dfe1fe971302126e81ecbeeda0","sha1":"a41ab8f31d2461f114a1a0625ab6a9520c7f90fb","sha256":"b15f065d7ef77728658b464df170ed55c4592b33fbd5114a6c9ba6959c4fc9ff","sha512":"c6e452c6fe1d358a72107c34475ddf3de212e4bc2ef539bedcb655643313154b68ede92cc37c68e9a2c55adf219821059bfdf9a67f33572c49687f30dd8b34e9","ssdeep":"","tlshash":"2711ecd5b3cacee484b9380fd583059d0d98454bd1304bdc54bd5336d5914cc1a07f67","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T16:49:36.042241Z","times_seen":299,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/vconsole@latest/dist/vconsole.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:19.943Z","timestamp":1791564379943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /vconsole@latest/dist/vconsole.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ktxjp.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 09 Oct 2026 16:46:19 GMT\r\nserver-timing: cfExtPri\r\nlocation: /vconsole@3.15.1/dist/vconsole.min.js\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\ncf-ray: a47edc5ebcaeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/icon-430.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.565Z","timestamp":1791564382565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/icon-430.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-521\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7NVFnxjEcVRq%2FFX%2BSF%2FsgqbaYlgcQOqZOGnQYy7npQzBvykmbfS3vElrdUsQKnMWgQxpK%2Ftawx98xw%2F1QIvntzQwUgBR7n7P9S6DazMJrCR33ZyOem74Tw57NiJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f0d34b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1313\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1313,"size_decoded":2004,"mime_type":"image/png","magic":"PNG image data, 39 x 39, 8-bit/color RGBA, non-interlaced","md5":"7ae93d3a136ffdbfcd740766c535c80c","sha1":"1c3da083f1eaeb3ad41df3d8a2c6ce8882388177","sha256":"de039f6bc89cbb124b84e03ff9253670bc5a4c60d01a535c5503165a99717ef1","sha512":"3db3c69fc1a02d641352726def819d489ee7227f108bf2cb1939147565046fcc273da4d32762a2aab55a2143d662d920a79749a18182603b3486f09e448958b5","ssdeep":"","tlshash":"d121c84a4565ccb6d9e49aa6019bc8d0f61bc05cc7453510ecdacfcfdbb40918a842e7","first_seen":"2026-03-05T18:43:11.138213Z","last_seen":"2026-10-09T16:49:36.010036Z","times_seen":21,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/fonts/DINOT-Medium.otf","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.648Z","timestamp":1791564382648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ktxjp.cyou/assets/index-BoLUGZeU.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6abcb145-11d88\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJb0Zlj5J4Df8aZNHAuh%2FSYfx6Brq1esm4r1pvMkUixtO2Lgd3fy%2FMKWYR2E8wHwhqHheU24553y1pHorYfwzF%2BlGbqG%2BivbyC59L6%2FKF2%2Fl4WYFpMTRPQXiyKSN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f8d53b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":73810,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-10-09T17:24:31.120578Z","times_seen":7741,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=c8641e3d141300632e5cc5e617932cac\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383961\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.971Z","timestamp":1791564383971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/log/log?plugin_sign=c8641e3d141300632e5cc5e617932cac\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383961\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 548\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":548,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlnr%2B13pkyh8htTV8rCyiyGI%2BPnXbr3umN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBA6%2Fl5y%2FlXFjI5vjI2l9IAlmMeR9yh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFW1Sck1G6%2FsSVWtCFABqypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6Ryh8hP3zGN9c%2Bt3OhMGpht3VwrNI4sna8yAKhl2fml2D9Ielkl5v9ldypyQtVPQXqsNcEP9khMhH9lhHzBdH5r3wbfQX%2Fr3XqN9aWr3DhMhH513uvPSfhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:46:24 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47edc77ff58120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":606,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-10-09T17:50:40.838956Z","times_seen":3006,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":18,"connect":7,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=2f5e4e39dc77e0cce0d6c03103fd1b0f\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383963\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.974Z","timestamp":1791564383974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/log/log?plugin_sign=2f5e4e39dc77e0cce0d6c03103fd1b0f\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383963\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 598\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":598,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlnr%2B13pkyh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCk8BAlqBAubl2fml2D5IAs5M2RkIhypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWB9w403E8BQImPSDWyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyGX5rXz41naVyAKqI5spyQjWrazvsNc%2ByAEgyQHqPSt5rNHbfSX8f3zqtdyi0qHAP9zZ1nX5yAKjBdHpP9I%2BPuI4PSH%2Br9DhMAuzBdHAtNHqrnm4D9Iq1NY4yAKhyh8hr9X%2FrNH%2Bt3VWPhyiyGsqyG4pyGIv1azqrnmvrNHbPnzvrCyiyGIKsncWtqHz\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:46:24 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47edc77ff57120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":606,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-10-09T17:50:40.838956Z","times_seen":3006,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/newKline","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.658Z","timestamp":1791564382658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /newKline HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJEhmafd%2FRrO6p3WEviXPW6lXLq656BrgQqrgy%2FOGb7%2FbK2jq%2F2C7RxmqaXlItvNeB90R1Mgx4mha%2FtlXe9oBgt%2F%2FezGPbZejB6ghvKMc9jbQ5BTz8MBoByqM%2BLPb95Ukg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc7118f056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":892,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-10-09T16:54:04.044817Z","times_seen":393,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getAllSetting","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.292Z","timestamp":1791564381292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yA3Z2kMOPP8O%2BLJAZ8EOKLLKnjLPcDrvnS7mW9tZeI2cuIBBl9Xbk4LHZUmJdBbhDVyalGCKayVEymjrCBpVEXz%2BR%2FzSsdrtHIkZW%2FnqHZ0jEW7AhK328LpeaVRqbBwsHg%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc672f0456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":715,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/platform/ktx/customer.min.js?1791564382182","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.184Z","timestamp":1791564382184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /platform/ktx/customer.min.js?1791564382182 HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKrtmNCpZw%2BGl2KJcU4%2FxZ%2BNTTEK%2FnO44%2FuAK1ouhTxUO3Sr1h%2FZu7KBdCEFgsoT1WMbi4jmBfYASHV4BwfW9KDKDdcX1W4%2Bhiz%2BCRy2SmzXKeRBm9SDnbwx4p5f\"}]}\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6abcb145-441\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a47edc6cacaab50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":1314,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"401ba0765dcb21edef2b7967c95ca957","sha1":"5370f6754c844f794d737717cdee93ee46c07e0d","sha256":"88bf19cdd60efdccce0a1113fe01a2f9bc3d37259afc60c9160a92d27a9f81fc","sha512":"3edacd5cec97289ee825d43c04464d1b9caa6c1f05c860699c405b45360c2a2cb2b49ffcbdcf5eb584b8275413d0314b85f86dc67637be48fe546e9b42dd3024","ssdeep":"","tlshash":"0a110d431c6364797bd5727b9b3f89ad3a9892436004cc20fc8dd82c2f809e20e5eee4","first_seen":"2026-09-25T14:02:37.218489Z","last_seen":"2026-10-09T16:49:35.947601Z","times_seen":7,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/BNB.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.867Z","timestamp":1791564382867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/BNB.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2560\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:30:22 GMT\r\netag: \"cb84d3ca48a52e3df1025731a8bef4ec\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: VPOEiAD2nY8z9QSV1.wLDACbBRxBtI9s\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: ZVP4UlnaE1zRtq0YF01HtiFU-q1KCPVXjxITod7HNV2RnBrFh0BPZg==\r\nage: 14322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":3209,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-10-09T17:24:31.116223Z","times_seen":1812,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/LTC.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.888Z","timestamp":1791564382888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/LTC.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 957\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:54 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:30:31 GMT\r\netag: \"db1f13e46508474023e51dac9b924272\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: g_cdj3TjMVGw_vf5Heig0wXuWzyx3JC9\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: fbB5_e5gHEplfnzPacDckse_ybkP9ZuYRt5Md8x8zvPX12HZIWgnuQ==\r\nage: 14308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":1605,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:24:31.076967Z","times_seen":718,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getAllSetting","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:21.288Z","timestamp":1791564381288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: \r\nlang: \r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:21 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RB5W0fzdWOdrOJcuavf17g%2BoiD9ByKPED%2FXILaNjUO2g8zXjsaBuXtpHRhZ2lmLT0HXvvRyoD2%2Fzf60gGQmYCQFc3OjAmc6mt2AjWHruS1lsaDmywW2inFVCgGQfHZrejw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc6a1ff356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26714,"size_decoded":7630,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (25390), with no line terminators","md5":"f67ddcb039a87f836262f9d8d3098179","sha1":"4a019d8eae539e2241721f68031c2f240eef53a3","sha256":"87b64992263d79c15daa01874223bf2d3e3b98f21c36ac33b6b9e7c0baa0aaed","sha512":"8e2c5b7e75ec16a98bfe8a6e55f63ba280a4060fe9921ddac442b36b8608fb7622a6700a07d9014fbff01ec5ea48f38683aa4df8977062ff934f86cc0535c2e5","ssdeep":"384:/HTQSUA11KSVCPNxX00aWA/4pgoT/yW2zDPMGH1SnF2a5aRn7wPtvzoPDIf:/jVQMwgo+W4Qg7wl8cf","tlshash":"f5c27359b0f8dcbccac739c940d77ada329c7263e6948c5bd0eaeebc51e4570480a14b","first_seen":"2026-09-25T14:15:59.454454Z","last_seen":"2026-10-09T16:49:35.934266Z","times_seen":4,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neweasset.s3.ap-southeast-1.amazonaws.com/3/svg/yellow/lang.svg","fqdn":"neweasset.s3.ap-southeast-1.amazonaws.com","domain":"neweasset.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.556Z","timestamp":1791564382556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /3/svg/yellow/lang.svg HTTP/1.1\r\nHost: neweasset.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: T0VCDTFRD8QJTNYE\r\nx-amz-id-2: kMHr6PFks/7bm/hSaeeB6G0YYrDm1MMP9zTmFe3Z5j7XQLzjcmTVuSL1GIADS5n9zaqXs1zctfODLPz+bV2dvYBRjUyf7Zar\r\nContent-Length: 2022\r\nAccept-Ranges: bytes\r\nDate: Fri, 09 Oct 2026 16:46:23 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 13 Oct 2025 08:37:32 GMT\r\nETag: \"aad9d0bef9dd32d3a6c601f26641f9d3\"\r\nx-amz-meta-checksum-sha256: 19561a7ec7ad2ef42596a0f215b10007a1b517d8b561de34c6024e029cd1dabd\r\nx-amz-meta-s3b-last-modified: 20250602T101706Z\r\nContent-Type: image/svg+xml\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2022,"size_decoded":2583,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aad9d0bef9dd32d3a6c601f26641f9d3","sha1":"a234fe80d1d2bddbf80a4e2fc23b9ec956a37481","sha256":"19561a7ec7ad2ef42596a0f215b10007a1b517d8b561de34c6024e029cd1dabd","sha512":"49b373453c5cf33f11d4fb07bb1e4dae9fec28d2ac8dd1328040604e5206cb983137ecfe94e94ca3afc3d30d0e3a7207132e89e85be409d3bbe421dd821e9fb0","ssdeep":"","tlshash":"7b4115f8db41a13860b943cdf52d2c18b70c6466b6dece78c22417c560a3cd5ae9e69f","first_seen":"2025-08-02T08:37:54.299062Z","last_seen":"2026-10-09T17:22:19.345908Z","times_seen":129,"resource_available":false,"data":null}},"time_used":1061,"timings":{"blocked":-1,"dns":0,"connect":258,"send":0,"wait":280,"receive":0,"ssl":523},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/newKline","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.656Z","timestamp":1791564382656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /newKline HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUjAUEsr1Szf7alYx%2FwQfD9DHujuDtZslBsGPi9kSQNWgAH%2FTX28Q2iY5cPRBowoqk8jmeE3Fk%2Fall8oB7uYrD3e%2FK9L3tCabZIfBwHXJAArAWBrzSoGZe0%2Ftndh4meQWQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc72992956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":886,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-10-09T16:54:04.044817Z","times_seen":393,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026direction_type=1\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385463\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:25.470Z","timestamp":1791564385470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026direction_type=1\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385463\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 448ca130a87ce1d7b957495041d1a29b\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=26b09fddc58b937ad10aca8435e7f46c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"26b09fddc58b937ad10aca8435e7f46c"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Fri, 09 Oct 2026 16:46:25 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncf-ray: a47edc816d56120a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://ktxjp.cyou\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 64c93c95-e2cb-4f82-81c3-5108dd5090bd\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":777,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-10-09T17:24:31.106943Z","times_seen":2124,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neweasset.s3.ap-southeast-1.amazonaws.com/3/svg/yellow/menu_arrow.svg","fqdn":"neweasset.s3.ap-southeast-1.amazonaws.com","domain":"neweasset.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.549Z","timestamp":1791564382549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /3/svg/yellow/menu_arrow.svg HTTP/1.1\r\nHost: neweasset.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: 398NRG20EGRV2V1R\r\nx-amz-id-2: v3KJK5oIpZhuAPzU+as/48vtu83vZ8iKEsajxfxjljCfqX5E4Z6UWAd5ElDq0V8Xc+vG5qDbf4uXk98HEoIsIREGVQSmGfKJ\r\nContent-Length: 492\r\nAccept-Ranges: bytes\r\nDate: Fri, 09 Oct 2026 16:46:29 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 13 Oct 2025 08:37:37 GMT\r\nETag: \"5efbc6abc63abcad5fa12b5ed7fd5e2b\"\r\nx-amz-meta-checksum-sha256: 0af39b7da292e9796c6cf6b993c15bf184f6977b1c79e5d308b6fbb9f4bbc76f\r\nx-amz-meta-s3b-last-modified: 20250602T101706Z\r\nContent-Type: image/svg+xml\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":492,"size_decoded":1052,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5efbc6abc63abcad5fa12b5ed7fd5e2b","sha1":"4811c501a704ed064e35913a25ee2e172f82efcc","sha256":"0af39b7da292e9796c6cf6b993c15bf184f6977b1c79e5d308b6fbb9f4bbc76f","sha512":"229352bad4c6d70aa290d30acd5a9539272b3cda979291fcf4d8dfdfc75c67f4049ec4b098032afd4217d1b975c1c1983f07f4ace916f317743b5c7827de6fb8","ssdeep":"","tlshash":"e2f00e8cd3989460e02a83c8d2ba16c9510e60c6c1c2119ced522d20c960cbbae823ec","first_seen":"2025-08-02T08:37:54.265447Z","last_seen":"2026-10-09T17:22:19.323519Z","times_seen":149,"resource_available":false,"data":null}},"time_used":7337,"timings":{"blocked":-1,"dns":5,"connect":257,"send":0,"wait":286,"receive":0,"ssl":6789},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/mail/listByUserId","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.651Z","timestamp":1791564382651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"POST /api/mail/listByUserId HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 2\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6spQWK2903hPNpQLYS4m10H9VyvJsMIc0T9SpN7EkbqAV5mDt638IRVUZLmwe%2B%2BLTMl6ccmCtUrRLLp96WEQrZCsdQJo6Lbs31gdwPufIXw0NMHr%2BCwF8TdBqQ3p0qQVLQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47edc71690456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":886,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"59a1afe8b31f80f0e51145407fed9514","sha1":"baae361ee7333bf1b8435c052beaa3b77cbb8940","sha256":"aa76b1b1cb076b4354edf2ba8556f1c8a11d98a3bd6962a6e79527007f9a6fef","sha512":"cae13bee231520d9a20dd235190e210225ef790e0df99e66d4fd88d3b91d09325f0f7de23c30e558b1292a0474c5f428d0c6b6841c062a72aa784cb43b6fcf74","ssdeep":"","tlshash":"3f90041fd04cd073114103c40444031c10151141373d47005d5dd375f1cc0cd011705c","first_seen":"2025-08-02T08:37:54.509369Z","last_seen":"2026-10-09T17:22:19.365549Z","times_seen":204,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neweasset.s3.ap-southeast-1.amazonaws.com/3/images/yellow/empty.png","fqdn":"neweasset.s3.ap-southeast-1.amazonaws.com","domain":"neweasset.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.516Z","timestamp":1791564383516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /3/images/yellow/empty.png HTTP/1.1\r\nHost: neweasset.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: T0V9M6TAN5JE0RRC\r\nx-amz-id-2: 49mGTyIvlw/Bdcr3YIlXWPOG/HRQjqnAAAWFN+i8OpHpcTbakE+48/Z3mKdsfoXR4bB0B0HC0OY34WyO32BzInnL8fE2j7ca\r\nContent-Length: 1648\r\nAccept-Ranges: bytes\r\nDate: Fri, 09 Oct 2026 16:46:23 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 13 Oct 2025 08:52:48 GMT\r\nETag: \"d6950d71bddb1a6f620f2f8989a7370e\"\r\nx-amz-meta-checksum-sha256: 850f9690ef0ea6fffc2998b2d729f348976505b7c88b3faacc5b3c5d60dfc0fb\r\nx-amz-meta-s3b-last-modified: 20250602T101706Z\r\nContent-Type: image/png\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1648,"size_decoded":2205,"mime_type":"image/png","magic":"PNG image data, 66 x 50, 8-bit/color RGBA, non-interlaced","md5":"d6950d71bddb1a6f620f2f8989a7370e","sha1":"fb00efd09bbe7ccc68b909eb7a690b134dfc9e83","sha256":"850f9690ef0ea6fffc2998b2d729f348976505b7c88b3faacc5b3c5d60dfc0fb","sha512":"6fb1508afe00f6cef297eb595b13a80f419d0a90044c828081affb34de96a9911a57b0f0990217b540fe37427b1aedb5e9a176df549e67a9cb22f32379e8c9ae","ssdeep":"","tlshash":"2831f8ea9f64af3551a513a9243e3604ed9f5f8b034bc30905747cbf850725e129c26b","first_seen":"2026-05-18T14:01:33.421704Z","last_seen":"2026-10-09T17:22:19.360136Z","times_seen":15,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.962Z","timestamp":1791564383962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 05:38:11 GMT\r\nserver: AmazonS3\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nx-amz-replication-status: REPLICA\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 204cef356c70af67cb3d9dcefede21f6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: JJjQ3MbiownxesPO2rio5K8eEV_R4CADbwU3-p2KycuPkLbjKUDoEQ==\r\nage: 817692\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":11867,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-10-09T17:50:40.725037Z","times_seen":3130,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?language=en-US\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383955\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:23.969Z","timestamp":1791564383969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 21:51:06 GMT","end":"Sat, 21 Nov 2026 22:51:04 GMT"},"fingerprint":{"sha1":"DB:AB:9E:78:CB:E8:C8:0A:A9:8C:FE:88:39:5E:BE:DB:7F:20:7E:15","sha256":"0D:B8:1F:90:BF:A4:B5:3E:DB:C8:A7:15:63:42:C3:A0:A8:91:D5:19:74:6C:7C:C6:4B:BD:4C:91:84:69:37:3D"}}},"request":{"raw":"OPTIONS /plugin/info?language=en-US\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564383955\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ndate: Fri, 09 Oct 2026 16:46:24 GMT\r\nserver: cloudflare\r\nx-request-id: f2c2875f-0442-406e-9f63-6f5a43fc9497\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47edc77ec800b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":727,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":7,"connect":10,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/zhuanye.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.578Z","timestamp":1791564382578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/zhuanye.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-69a2\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C3LHaNBruzyhsC3qyni%2BLJb4yPVbf9BaibHywSUHC%2BDT%2BaPvefpA03%2FvfLr%2F15JljIaeQKw50p2PciFwJL8rQ2%2BNnaaRte9nF6WK4jhDm7RfSur%2FGjjd9v9REBkE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f1d40b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27042,"size_decoded":27739,"mime_type":"image/png","magic":"PNG image data, 198 x 148, 8-bit/color RGBA, non-interlaced","md5":"a9bf90258f55c68e318b1942c65b0824","sha1":"9cb90b3c02891f921d1b00b73158190acad0ef2f","sha256":"14da9772486fee8b8648396707e1eaf0948aeebecb36ca3bbb14e5eddd0c0f91","sha512":"a50c29672a870da2c514523e38ddc527c7b1574e255489effaa28e6524f01037e96ce8704b946a669894d1cc19ba27019b2eb4c26fc94465c26861582d560e6a","ssdeep":"384:QKPWnXEcVCLNBR1NgMQ9o79nIqvMYgVsNaKlY3A51gdxxgTtIYJHNZJcjC93EaBB:VP2XpVUB7iMSo797U5iRu3UuPicjsQb0","tlshash":"1dc2e15a4128ed363ac0f157c95ba5ad75ac0382fa3748428a20fb3cd7d68c7d327697","first_seen":"2026-03-05T18:43:11.219129Z","last_seen":"2026-10-09T16:49:35.872342Z","times_seen":21,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/duoyuan.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.580Z","timestamp":1791564382580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/duoyuan.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=4,i\r\netag: \"6abcb145-5b61\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bf9eNOn1ZBV3ARJpj4nyDBuKtDr%2BkKEzRYmcSHDi%2Bta7n2oPmTUjc7gS%2FhrKodkJOSqwsvnCd59mb4ZXcao97ZiIWLV9Mper3%2B4ffhGcdsW6hzwl%2Bqr0GgYDtDPQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6f1d41b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23393,"size_decoded":24086,"mime_type":"image/png","magic":"PNG image data, 148 x 136, 8-bit/color RGBA, non-interlaced","md5":"6ab28203db6518539c388adf5f43b7e9","sha1":"83ac838f6a828265d0f15c38c3fe25450c711b8a","sha256":"34578ffef3bc56f6bf79b18876abb497d673c2e93e2a9d02efa9a5fde49db803","sha512":"a4b9c149e03da9c724bc5dfc2b954e28481695f78703661ca4cec45988117681b5f61ccd89f60e5f0f24140f45b30789207455f9f4685dfa84a213e7e0f96d08","ssdeep":"384:Lud9mJFAqqwDrzfFAoLJfz6Z9XGEu1lKKiQSkar0Pad3erd38n:smJFGwD3K9XGuBmoQy","tlshash":"6cb2d1607175c2ead9b1f956c1e235023d5b26d46b6e647ebe4b71bc08fc8042c17fa4","first_seen":"2026-03-05T18:43:11.154434Z","last_seen":"2026-10-09T16:49:36.010741Z","times_seen":21,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/PAXG.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.898Z","timestamp":1791564382898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/PAXG.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2078\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:42 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:17:25 GMT\r\netag: \"693dc78232b861c71aa4d5944d90abe7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TQAxRIdxKv4egagsl9z4NXubRVD2W8x_\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: io3LjaF_-4YIPyxNJrvlwvndtDv0L_ZHGDQGwBUSB7r1lEB4Z-xmcQ==\r\nage: 14321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2078,"size_decoded":2653,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"693dc78232b861c71aa4d5944d90abe7","sha1":"29b78c1b7423bc503b2451b6e02ff05c9f656508","sha256":"909ded8d23eb672836fc67f05279336432c99b22cd0b2e3ef22eedd3c2a032c5","sha512":"3ef7de08011511e847c4fd227568c8ef3a218392b5010aa424c3d16e545c54adc5e5f849081b14203754be325142b47bb7f99b15551b51afd0ace4e9632fe718","ssdeep":"","tlshash":"74411a93cefb0928ef0618b9aa5d54a0893bc8cac441180e2320e23f9b5489784959a5","first_seen":"2025-07-06T22:01:43.081145Z","last_seen":"2026-10-09T16:49:35.898593Z","times_seen":31,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/api/common/getMt5Amount?coin=xag","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.903Z","timestamp":1791564382903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzh7B4SeqZaE80e4oQuHcMkcBYkMLVVA8QG4Mt8BFc90mcUL%2BIuZ%2FrLCrMLkZT%2Bf5gPGpQ2X%2F5cZ1a1WUaPf4ZwkXilwqq79VLoz8n0OutDqgglHaawSq3Dn7J1jJ%2BCCnw%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc7118f356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":717,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026limit=20\u0026sender_type=0\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026direction_type=0\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385116\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:25.122Z","timestamp":1791564385122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/recent-msg-list-v2?login_token=f20527783b95c11b5a0a7e2b715ebe10\u0026limit=20\u0026sender_type=0\u0026chat_user_id=5e7fd3f1d3c3c6d35414954c0002c3ca\u0026direction_type=0\u0026plugin_id=g1fahk8\u0026over_time=\u0026env=chat\u0026_=1791564385116\u0026_lt=f20527783b95c11b5a0a7e2b715ebe10\u0026_u=26b09fddc58b937ad10aca8435e7f46c\u0026_xma_=594660 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nOrigin: https://ktxjp.cyou\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:46:25 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a47edc7f1b8e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":559,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":6,"connect":13,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ktxjp.cyou/resource/images/yellow/img-332.png","fqdn":"ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"172.67.173.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.837Z","timestamp":1791564382837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"GET /resource/images/yellow/img-332.png HTTP/1.1\r\nHost: ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 30 Sep 2026 06:50:45 GMT\r\npriority: u=5,i\r\netag: \"6abcb145-7be\"\r\naccept-ranges: bytes\r\nage: 2402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xlToJGoUm8fE7dDK2N4M0qmUmP1Dfop8CDVjecz%2BWeEjcm4k5ar9x%2FJocpOGIEP3K2tCYXBlN3C19ckxVMN1k0SM67mWxdYhWG37MhybyqrKJQ8bpHAIyrPY%2Bx5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc70bd8cb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1982\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1982,"size_decoded":2669,"mime_type":"image/png","magic":"PNG image data, 164 x 30, 8-bit/color RGBA, non-interlaced","md5":"ec8c1df1f4fea34484e75a0ddec7f07f","sha1":"79dc2d9217fc8002ee1a71295f7af5c716d04af8","sha256":"7ea72448df7b71317dd9a4666d54e017efcdcf32fb4e915a29dbb4e6ad962eeb","sha512":"5e384a17e40755a56da10d61ca6e09fae67ada0a204b81a42c84d2a9678be9f2e345f5e161c76aa926689e03e114a9302b1b51f442a213dba236bc16b5a71112","ssdeep":"","tlshash":"c8414cdb2275de45b30c43a98101c5f13497afcb8826728237bef4ca05c066c09d6b53","first_seen":"2026-03-05T18:43:11.170609Z","last_seen":"2026-10-09T16:49:35.976797Z","times_seen":21,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/USDHKD.png","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.215.220","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.856Z","timestamp":1791564382856,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/USDHKD.png HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: G+nKivOwwCPsrbrbhH9w1u6ONPQUAV8EzbYHSAAtwOviwk24d7H4POBMFS8em7RhiwickYed5OBLtnKVh69upSMqRLLnxgxo\r\nx-amz-request-id: 398Y4QHYKQ10VQN7\r\nDate: Fri, 09 Oct 2026 16:46:30 GMT\r\nLast-Modified: Thu, 05 Jun 2025 09:06:24 GMT\r\nETag: \"cc763d2d6a128029e5344ed0ff3fd18b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 7edd54b8da84c425236223359385868515754b569b21791cf5e2a4b717e068cc\r\nx-amz-meta-s3b-last-modified: 20250605T090423Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 39411\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39411,"size_decoded":39960,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 742x401, components 3","md5":"cc763d2d6a128029e5344ed0ff3fd18b","sha1":"6e09d5e7e95496e8505cad76bb003f8752a6225c","sha256":"7edd54b8da84c425236223359385868515754b569b21791cf5e2a4b717e068cc","sha512":"1f53f91b0e4dc8f08cf1b10b56a58b42250c5d79567f66ae3be6d9f9c2e21edf80b7a7039da66d8ab8aeab6b0a606718912d3e254ff9038edc51c5c36531e660","ssdeep":"768:tguUafE/C6EsuBE1c45eDvKxbbJrGzipOOOOigPjXdlTO4hdtjJdKTyLn:VfE/CHsumG4RxbdGzEOOOOjXdlaK1JQY","tlshash":"b203e181a1ba5c05df33cdfd0aee728fdfa0bd51cb80552eb4570618b8bb241b958da1","first_seen":"2026-02-01T00:50:34.410751Z","last_seen":"2026-10-09T16:57:30.478993Z","times_seen":26,"resource_available":false,"data":null}},"time_used":7974,"timings":{"blocked":-1,"dns":0,"connect":249,"send":0,"wait":274,"receive":996,"ssl":6455},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ktxjp.cyou/newKline","fqdn":"api.ktxjp.cyou","domain":"ktxjp.cyou","tld":"cyou"},"ip":{"addr":"104.21.63.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ktxjp.cyou/","date":"2026-10-09T16:46:22.666Z","timestamp":1791564382666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ktxjp.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 03:03:22 GMT","end":"Sun, 20 Dec 2026 03:03:21 GMT"},"fingerprint":{"sha1":"A5:42:34:75:FB:D1:D3:A9:62:D6:EA:D1:E3:37:F1:B1:5F:6D:57:EF","sha256":"B6:E3:CE:43:AA:13:85:1D:7B:69:37:16:6B:D6:23:4E:EC:E2:E6:47:28:A1:80:53:A3:46:97:79:A5:7A:22:DD"}}},"request":{"raw":"OPTIONS /newKline HTTP/1.1\r\nHost: api.ktxjp.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ktxjp.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:46:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tTLNVHJLXEVWPuH%2BM45pFUQZZ8Y8bPU4q2dqLnhTby1FDwieuA7J8eh5%2B6wDNJVmfgcy844G2zRnlZcmNsZQzxfMwL3nUZPkLFsjDu%2FyvveggxUwTqWBlMknOGwi3t7jA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ktxjp.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47edc6fa8b856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":713,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.ktxjp.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"api.ktxjp.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}