{"report_id":"e7830dfa-19e1-412a-b6da-955e1eda7b8c","version":6,"status":"done","tags":[],"date":"2025-11-19T07:18:01Z","url":{"schema":"http","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"title":"科学刀 - 开放交流，共享精神，走进科学刀论坛 - Powered by Discuz!","dom":{"size":32511,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2055)","md5":"6cc183e0ee0ebcc7023050957a92c028","sha1":"b10cd6d2847d153a186012f510ecd598c25c07d8","sha256":"269baa8068a621a01b5f2a61a5cc13d36b40ac26d3ca73371964cedd7600c521","sha512":"194d5b0c8bbf67067d0fe1c00782f50532169977154f3bfe6335c3bae51d62cd129813e4a4b9a25c053f45ca6df85293c3ef827e73c7a3a1a6d9e32f1a4591b5","ssdeep":"768:3E2aKnKFjFm5Q4wKqkDrtOoFP9zwDPy8p6U:02aKnK9FmVwKltOoFP9zMPTp6U","tlshash":"ffe2e823d9d64567061784e0f8f2af1db0d3425bdb128d88f5fc8ae59f84fa69c1209e","dom_hash":"domhash6064613ab50486fa2072fa87d33524d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-24T07:18:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"s.url.cn","ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2003-03-17","domain_rank":3398613,"first_seen":"2015-06-12T03:52:15Z","last_seen":"2025-11-13T00:59:31.33303Z","alert_count":0,"request_count":5,"received_data":456841,"sent_data":2290,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.kxdao.org","ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2018-04-21","domain_rank":0,"first_seen":"2022-09-15T16:44:18Z","last_seen":"2025-10-21T07:30:56.247743Z","alert_count":0,"request_count":25,"received_data":622595,"sent_data":17620,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Discuz! X:3.4","description":"Discuz! X is an internet forum software written in PHP and supports MySQL and PostgreSQL databases.","website":"https://www.discuz.net","common_platform_enumeration":"","icon":"Discuz X.png","categories":["Message boards"]}]},{"fqdn":"www.kxdao.net","ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2018-03-13","domain_rank":0,"first_seen":"2025-10-06T04:09:44.670454Z","last_seen":"2025-10-06T04:09:44.670454Z","alert_count":0,"request_count":5,"received_data":4601,"sent_data":2291,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.geetest.com","ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-03-05","domain_rank":196356,"first_seen":"2015-01-16T07:12:35Z","last_seen":"2025-11-18T22:25:53.491892Z","alert_count":0,"request_count":2,"received_data":346171,"sent_data":891,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"wx.y.gtimg.cn","ip":{"addr":"203.205.137.101","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2008-10-09","domain_rank":844581,"first_seen":"2023-07-05T14:24:26Z","last_seen":"2025-11-03T11:06:57.838742Z","alert_count":0,"request_count":3,"received_data":1145531,"sent_data":1390,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img02.sogoucdn.com","ip":{"addr":"43.152.180.110","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2013-07-11","domain_rank":1685723,"first_seen":"2014-02-15T22:14:35Z","last_seen":"2025-10-19T02:41:04.216427Z","alert_count":0,"request_count":1,"received_data":382,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.layuicdn.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-06-08","domain_rank":0,"first_seen":"2020-01-14T09:48:27Z","last_seen":"2025-11-03T14:58:10.05952Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":1706,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2025-11-17T00:13:10.547488Z","alert_count":0,"request_count":1,"received_data":175,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"api.geetest.com","ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2012-03-05","domain_rank":806581,"first_seen":"2014-04-14T02:42:38Z","last_seen":"2025-11-09T22:08:20.457232Z","alert_count":0,"request_count":2,"received_data":2706,"sent_data":2486,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a5711da5ca8adf11d9ab44e9b80310c","sha1":"7279bbaf45ad71bfa3b70635eaf22193d1a44453","sha256":"c6fbec99f9fc881004aba7b83d6367ee7908a228f73e9fc3c8f64a8f2284534a","sha512":"b2f9d4ae2629c08e05dacdf945c5736b9b05e10f6bb2c946012c3b6e61b1a446b7bbe20e850a18ed38d0017bc5167ace36fa0d7506596cb8f8141b53fa8fa0c0","ssdeep":"","tlshash":"90f09e2a7e32a2000206e635bee5316e8662a9fa1fd10660e819396c60c5a46d56c61b","size":497,"data":"","first_seen":"2025-11-19T07:18:32.325533Z","last_seen":"2025-11-19T07:18:32.325533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5a1a654116dc6d8da68c6af728dea88","sha1":"6d7d311c95d8f64bba6c0003ba5559a692b658ba","sha256":"109a6a6ad46e7da364d175c2c16c9ca3c3111519cf97bf3ea9e6a61e22fa8d8d","sha512":"a8e2cddbb693d82f5d2faa5fd6730cb21032cf3e3449285a33024cb674a706ad70290fc7e9b2361b060dd464647d88fb7ed48b760b72223870c8cee443ff9691","ssdeep":"","tlshash":"3680003008b2208b883a082a02ca82aa8c8a282088202222cf880a0028b0ca0ccc002c","size":32,"data":"","first_seen":"2023-03-08T08:19:49Z","last_seen":"2025-12-26T10:51:46.771631Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5f4ea336ed2a6f72617654d5e6986508","sha1":"7bee1abbf241c69851b3db9d55cdf61a5340118c","sha256":"130ddd31e00b4c5d4cc86c978a97535571fa74c22067a836e993f480b76d8c33","sha512":"dee14c99aacbd372c3a84b1068602331bb6616d78d495bc9f94047dba34fc6f57c9b51b2bfccdb76adbce8bffc46787cabc597eafb54d988f45f00d7c3bc69e7","ssdeep":"","tlshash":"c160000003000030f0000cccc00c000c33300c030c0000c030000333c0000c03f00303","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.085877Z","times_seen":1530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0c25f0b7998428cafe8de4c0464d0a1","sha1":"d29f2664138e64b15d88b0978365ec1ace30842c","sha256":"b418a797210b0e664a1851caa6b452f34f86ba8dfcac5e255d93d4bc10c46ebd","sha512":"6752bb38476dd5b9a1d7add2de61612e60af873e0335355f206759bf9a293edaad48b3c622ecf4aeb382a8e4af393e8b4f8208228c38ccf6b9ad9175c32de532","ssdeep":"","tlshash":"dce0a763b56737b05a5e136aa3f10b6278e1111f0514d4d03b4ccdaf5f18f5528be3a5","size":347,"data":"","first_seen":"2025-10-06T04:10:05.740872Z","last_seen":"2026-03-08T21:57:16.336668Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/study_textpane/images/jquery-1.8.3.min.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93637,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-04-05T13:50:50.487095Z","times_seen":20541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/jzsjiale_sms/static/js/jquery.min.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c123f43d5ebbbda71d02ceb5d8ad227","sha1":"aab2b8ea8d6f24d70f9f9f20af20e5054c9ad409","sha256":"ace97c1a8f130bbe6ba993ed743e2ec3e25d947c06291bb23e10759467ec67e7","sha512":"e335f8ed59655fa9a41801e62a148ab3c340233c5786f2f109671bb772fcfab0b81fcf8d62d02a15cdf6fcde8b4c9b6df6a2a331e037100f817825e88ae3dc24","ssdeep":"1536:K4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/IodZ7qABZnu0sFB:KGsKXAI2p0WPdbDrstfau","tlshash":"7f9308ddb2d1b06257bb20bd006f540ff236195d280d8850f129e8eabc74a4d927bfad","size":93883,"data":"","first_seen":"2025-09-27T22:55:53.130667Z","last_seen":"2025-12-26T10:51:46.724045Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"16c6f297db4cb09d6526ab08b57817a3","sha1":"5781c1843358b64158ed0a26256a14e7680feaeb","sha256":"0afb948e6ab392ce96492bec0761fbae76d8214583ac3dfd541b45cd35be1e85","sha512":"77bf9679449b24127894c465f900cfdff37620a5a5a0ef57e14435c5180e13705c70c0984035cea908ac71ba0b0c3dcdc6f5d94f4a233d675f48bc11a0185666","ssdeep":"","tlshash":"8921ce4a94d251946813baeccfaf9600f02245473006de703a0c8280bf1603da9fdfcf","size":1296,"data":"","first_seen":"2025-10-06T04:10:05.743206Z","last_seen":"2025-12-26T10:51:46.776405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b704049bb449560a7e16155b3d01d53","sha1":"c63ce43685021734249cbe2c8ed829fb3c521f10","sha256":"e225f77ed9a896d53048ea75bfeab57f08c128e083e1f849763de437d18e04bd","sha512":"453317e909047a6f89e1cbc056a7d7222390ae0069637d18e7295a46d25306aea033f16934dd975b94eb8a1fd91ca1f00d14769f7407d9cde6c3274b3d79ffbc","ssdeep":"","tlshash":"e970000002802000b8200088b008002832aa02030a88802080a0030000083803ac8200","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.089271Z","times_seen":1538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c7ba982182028c229e82902485fecf","sha1":"819a5ac5ca686f198c049cafcbbb42a5ae15a6df","sha256":"0de5222c521fe1878f425f7805482086f148ee8fade7715d3befc07e72378301","sha512":"9827bcacf9d99be45defc706e63c1d80e079d71f457d2bf20f8c68d699e755bbd8281a33b13e4504f174e04699788e016402a0b192b7391202b6098a0825cd6e","ssdeep":"","tlshash":"a5800008b80083ac0220200ea0308328b202038e0030c8a80acc0a0000082882a02828","size":27,"data":"","first_seen":"2023-03-12T14:56:12Z","last_seen":"2026-03-20T14:03:42.16542Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"44ed3d7212ef1474929386fd1ac7e848","sha1":"65825fcdc6cae131b6db8a65c62c135d791ddc9c","sha256":"3c6fe7f3e978d598d2e7bdacbc77a6803af076ca5b39573751ee4073dcd3d522","sha512":"5d8c2b9bde9d1a7b3dc0dcb8deb1d164d7da9f62b4792e56c56cd247710664b37af57c193bbf1556ebe560a7185669c360c654ba1a596a12495bff46933eedbd","ssdeep":"","tlshash":"af800028380080288230280ea0380328a082238f2020c080200c0800020a28c2a02038","size":26,"data":"","first_seen":"2023-03-07T22:36:53Z","last_seen":"2026-04-02T03:17:29.501389Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d8b2bccdd8396b9f97e22f2e3fc13a49","sha1":"dcf73be0165354ac59dbfd5c7c3f9739fed624d4","sha256":"c3d8dd48ba3c697b4480c600905bd008a73d756f4ca7f32165ee1ef674ef7b80","sha512":"a18222e090d652aeaae2ac96c001a3b8744086cf720121996f0e527c772cb5047dc75800c0bb0b00b2119bfe2714e04b8d8ed2790bbacc4fead0b29d8091a06f","ssdeep":"","tlshash":"9670002083200000e000228080280088a22000230800a82032008a00c0000a82a28000","size":18,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.079299Z","times_seen":1535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/geetest3/js/gt3-init.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16714c3f957f541876828de4d31ba5d3","sha1":"c8763edece48a3cb4ac0a3fbe9cdf6083b045aa3","sha256":"e80c80c96999573c0cbc3940f1a8f927b8c3697eec3d72db6315c2ce0d0aab45","sha512":"867e14c5d311108de1d439c961d7f984f4b251c9dd18143c3d4fb609ff33aa5ed01d8ae4ed6aa59aea5f9c9a0e8b594458e5cea6c3f2e7635dddabfbad22e69f","ssdeep":"","tlshash":"1641fd26b2aa8185082bb5ddcb6f4244f42a90277005ce603c0d92886f1503c62bffcf","size":1920,"data":"","first_seen":"2025-10-06T04:10:05.675079Z","last_seen":"2026-03-08T21:57:16.213113Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/jzsjiale_sms/static/js/jquery.min.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c123f43d5ebbbda71d02ceb5d8ad227","sha1":"aab2b8ea8d6f24d70f9f9f20af20e5054c9ad409","sha256":"ace97c1a8f130bbe6ba993ed743e2ec3e25d947c06291bb23e10759467ec67e7","sha512":"e335f8ed59655fa9a41801e62a148ab3c340233c5786f2f109671bb772fcfab0b81fcf8d62d02a15cdf6fcde8b4c9b6df6a2a331e037100f817825e88ae3dc24","ssdeep":"1536:K4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/IodZ7qABZnu0sFB:KGsKXAI2p0WPdbDrstfau","tlshash":"7f9308ddb2d1b06257bb20bd006f540ff236195d280d8850f129e8eabc74a4d927bfad","size":93883,"data":"","first_seen":"2025-09-27T22:55:53.130667Z","last_seen":"2025-12-26T10:51:46.724045Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/study_textpane/images/masonry-docs.min.js?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb3e5900f64285fc26b22e3f69236e1e","sha1":"571a894b5efed15e7c39e38a04d24e2eb15f1cbb","sha256":"e1f61fcc4dfb4f0a900bee824f089a1a37be2d9f1d36c66c2e76716a5e986022","sha512":"b1628526b58cfbadcc7a9276ac0c27d9d498d3acef9a6623d858e2baed14918b67ce8d8bc3ddc1651c9d46b796f4eb52d7ba9da80acc8309653cb9fbff06d373","ssdeep":"768:IxVS/9WC3Ilgn/TBnn0FP+TLCWEZHxx/4:zlWCoOBnn0F2+Hxx/4","tlshash":"53f2c849b75174354387a1a692af010fb337207caa1680ecb7a5dcea1cb9c4e2137f79","size":35240,"data":"","first_seen":"2023-03-13T12:27:06Z","last_seen":"2026-03-30T00:41:21.428569Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/cache/forum.js?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb71d09ffa19eb2b907aa9671442519b","sha1":"bd33d131fa0ca8b58e5a04fc273e88e19a2886d2","sha256":"431eefbafc9f92eaeededf64fe9ff5f9fcc7d0b2cc4b3bdaa806cf57e215c818","sha512":"0855be591c9c18d57d5600f9aac1387754a2232d0be1c230567bc308212a0bf78ed13dd53f49299a6a783cb7ad3b753ac19a893efb0eb353ee542e4406cd6d68","ssdeep":"384:YBp6Doh+oQKsB2rLbdqY3lAxsrRoUlBIxIHXc033J9y65P/Ljdw4pqb/73no3M/4:M6DQ+yPbdqY3lAxsGyGS3cany8PDjdCw","tlshash":"c79209853b6c2205d6e7316259af4100ba37743483013479f869fce4ada8d69b53febe","size":19869,"data":"","first_seen":"2023-03-07T14:36:07Z","last_seen":"2026-04-03T17:31:48.816644Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4e8aeb552ea81bb0c6c223eaacf15af","sha1":"ec23a147ca0775c11cf6cb46b79d3d6798087194","sha256":"59e58162674f31c42d8c271e0f18727e825419dc2c29bcda1aa6a3ed8130526c","sha512":"827ae7047260427c0fbb96faa8f6b24ad809549471d427477191f33df5eda5e47cceef2ed181510133e3be73785111f8cd8f72924f2b4c858dd39704d9e2d665","ssdeep":"","tlshash":"01d0a79ddbf30070603b741c9d7f40012e67b5636408fe207b9cc1814f861184077925","size":274,"data":"","first_seen":"2025-10-06T04:10:05.752483Z","last_seen":"2025-12-26T10:51:46.77889Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c7ba982182028c229e82902485fecf","sha1":"819a5ac5ca686f198c049cafcbbb42a5ae15a6df","sha256":"0de5222c521fe1878f425f7805482086f148ee8fade7715d3befc07e72378301","sha512":"9827bcacf9d99be45defc706e63c1d80e079d71f457d2bf20f8c68d699e755bbd8281a33b13e4504f174e04699788e016402a0b192b7391202b6098a0825cd6e","ssdeep":"","tlshash":"a5800008b80083ac0220200ea0308328b202038e0030c8a80acc0a0000082882a02828","size":27,"data":"","first_seen":"2023-03-12T14:56:12Z","last_seen":"2026-03-20T14:03:42.16542Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b70c7d506e86f6fd3e72ff61d41c07d","sha1":"752b239d7d46bc3e29f45c1f7f2e70527ca6aa07","sha256":"f3dfa23eb43210cf0b6fbd2eb34ebd1ee01b9f320441cc90c0e6c32c3cef18aa","sha512":"d0d615be17afdf6946aa89db17196f7e0fee94aa12993230915abce89a53c9249b6c7b793563678e82a6851d2513a958173039de2490634aca1c952900616ea5","ssdeep":"","tlshash":"fb0199e78480d9082669a46dfcb9b37c90dba10a9f40dc9dfe8f08450f2e5a84c3a155","size":694,"data":"","first_seen":"2025-10-06T04:10:05.757577Z","last_seen":"2025-12-26T10:51:46.780697Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.geetest.com/gettype.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026callback=geetest_1763536666117","fqdn":"api.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2abad7980d1043688a015efdea1b186","sha1":"91cb0275ccdf6973bd980c53e7f5471dcc6a21fc","sha256":"cf38cfe599c1d662609482810a36b27415734f6849b8b82b581a6e7c98b77c67","sha512":"93289ab8939fdcaef7ec5ab280a44321c20e5142b42292cb640eeba8003a609c49252a5d4913499f8ad481c4a8f41c7c66070c10c40032fb7cb39453c78fe11e","ssdeep":"","tlshash":"6ff0a01be803caa70ca6bc583e384236f1d8d0a246b0825ec08d9c64d2adc087b98193","size":465,"data":"","first_seen":"2025-11-19T07:18:32.276029Z","last_seen":"2025-11-19T07:18:32.276029Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"27d58fc853760c4c5959ea4c18102e05","sha1":"a0b1e5bac4f9ffab125e2a72ec32515ecfe980a7","sha256":"2689585176589381b3c09d32ba2ae5ac4e9420773ef1de98ba8606d037aface4","sha512":"56ce2e09b837040f5c37c8c6470990a0e93f7372611a397000e3ee7449c73d30485f3ec41bcdac1a175ac027d3f7ac47452f3cacd5fd6f7d32088a015010f2c7","ssdeep":"","tlshash":"fc600000c3300000f00300ccc00cc03c33300c030c000cc00000030000c003c3f300c0","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.076386Z","times_seen":1537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8c1994b5f132a6d00db7043ca0fb5d34","sha1":"08ee2e698c7187ef69e45861abaa2e986a0e2656","sha256":"6baecf50ed14279e5b1e6f3e8472f26fb323e339b3f5e29349ccbf33a1b77c5b","sha512":"913ca4e12a3adf418096a5be985499ac7aabbbe4a69e1292bfa97d88b445c37611bf321657435357b56dc186b57797e168b0590a57b80ed0e4f41014ec4091f5","ssdeep":"","tlshash":"0970000002000008b0000880a8080008aa3020030ac000822020220080e00202a08220","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.087214Z","times_seen":1537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0bbea63f8e43936a2da15fb0e24b24ac","sha1":"d711331a8c8b74a037e8758baf88df16baa69236","sha256":"2f41ab97ac43c4382461cc607ed39f109747088e7d47ffccc873372581545076","sha512":"7e397d4614391095fa43b1481b00f9d4169b5336ae4f592913a51145a0a84c7a5b6a37fc9b68b5ae49d80e55ed3e88921922357a64a3dd1a19bb0d2d284fb40a","ssdeep":"","tlshash":"af70000002808020a0800080c008000a2222000308000823b0228b0800220aa2a20000","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.076944Z","times_seen":1535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7819c0d19b10856f8e2a55bb92f684a9","sha1":"7bea260aaa363acbed63896b5f1c10ccdaea6c08","sha256":"7492accd96d886675fb5f161543965a8cd07f1539e0960b7d603e72cefc8ce37","sha512":"0cc08a4a3e5e2e2c1cc5d6c9012dfcc145b36799c501ece9dba54c776c882b9346da34a6db29ffafa18a63be2e3b04573ba1287e9f345dda3cc83ecf7758b5de","ssdeep":"","tlshash":"7970000c0a208020a000208e8028000aea2020832a0000800002820000800002e20200","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.070666Z","times_seen":1537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/cache/logging.js?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4544d50d2dde9cccea8012a9a5d0cfb7","sha1":"db2e168b35fb57db8002e3223effcc50a705ed30","sha256":"843ca4ccc43f7c97d0f24897b2890a713355e0e5e89f6a96001e663e10282b45","sha512":"6b99c931cee98a38e2d2fd44091b46266027ff407acab2f4255b66d3f66fca96cc05c45f9160864f0c83fda36224b44ad2ff5f678a7e29cf8d400453afc30c62","ssdeep":"","tlshash":"39e0ab8a336b052a0a9231e000c3cb567b38ae108012a80ca4063e812f39d52e8b7730","size":390,"data":"","first_seen":"2023-03-07T13:20:42Z","last_seen":"2026-04-05T12:32:53.046817Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/geetest3/js/gt.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87d1e58e54fb76b16b649cd025f63a3b","sha1":"57a53b2ffdd41ed3609964069bc6b93003648006","sha256":"add1840190041b98d2c3facdfc43ac873a2e7c759fe62034e5d984172acee5bb","sha512":"ff8d949e7df9053affde1194d5920c5b4128ba9cb81f899901c5b8d9d70dd23b64e2f38fac150905b589e6fd50beeb4126419e7cbc33bb698a683cc30d660ff0","ssdeep":"192:2eoSgR4CxE+jIvbk7ANr2oIGymkw7tTu7qBynHTABH9VMUxF6dK3wrlSLgwy7KCo:2eQ/reTQCynsBdVkKgrWQZo","tlshash":"9d02de1ea8f754938967b8798b6fa214f9398553041cce023e8cf3549f644385baafdc","size":8923,"data":"","first_seen":"2023-03-07T12:06:16Z","last_seen":"2026-03-08T21:57:16.299877Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d10b0fb2b2ed9709182d1aa4175f2e72","sha1":"bd0b80baa53f9f60339d157a42f7c252d1901f9a","sha256":"6e53b91f375b713f2b9b64a220f4a1d11a5495149be00084443cad7a4dc71107","sha512":"e4b97a7ea73427bc5e10488fdf46a11d271075697efc8bb388c91d6f828907675341effebe490151134c2ba3d0dfb2e59fd695cd2cb515cf61ad52fde677dbd0","ssdeep":"","tlshash":"fc60000cf0f0300003f0030fc00fc0000030000003c00300c0cc000c000000c00c300c","size":15,"data":"","first_seen":"2023-03-07T12:08:39Z","last_seen":"2026-04-04T07:11:55.842733Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/static/js/fullpage.9.2.0-guwyxh.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f95bdf4200f087eef816dedb2dbd7f0","sha1":"aaab80cdd50dc5f36050b04b5f7cc0079d667837","sha256":"923a147d20ec0a941a44ab815991034fee5af16d5bb59fa23dcc86eb1a8734e1","sha512":"c51e522bca043becff365127a0477d9cacf524c5d491729712017639b4a3527408c17b95829da72e8b2cce39fd3b932ecd57bbc9781e47ba6e51d6a988709d52","ssdeep":"3072:9Zoz8Co64eZ7wKHYS+ou4hyZtCegH/7tdVvVwhQSuL6BL0lBjMANErWx:9heNPHxMYegfpdpTplBjMyErWx","tlshash":"0554b8e233913eda9577a62f4c3f3906a2b429600547da80363ff3499f78786c39561b","size":304290,"data":"","first_seen":"2025-07-30T16:54:45.340584Z","last_seen":"2026-03-27T14:32:11.051928Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa632d4e4286509fa66a4b8c5f31c7c9","sha1":"ac5dc261a02bcaf0aebd7eec66c29bf240c5481a","sha256":"a7f46285c5dfdbbf3eb2cac88e562aef4939467c1bf6d2d72718b47b2afce60c","sha512":"9ad64babb8d8147e982aa8633479daed8b155e9145924b4ab7138670a3f813950f70918199a47e1fec2eb0480692e1e063a2922bec4d2858b311f986e02d4558","ssdeep":"","tlshash":"9e70000003300f00fc0300c0f00c000c33fcc0030c0000c000000f0c0000c0c3fc00c0","size":20,"data":"","first_seen":"2023-03-07T13:20:42Z","last_seen":"2026-04-05T12:32:53.0758Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/cache/common.js?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d4bfc33fa3badc42d9200eb8f47bcb2","sha1":"3f89d367d4ef99f06c406a8eea20339ef96cef8f","sha256":"d049c37e84bb09c3c4620deaa1b0700aeed96b3726aee6eaad48000771a35251","sha512":"14078f4dac91869f55256a506c9039fb841172573af9f22ab49b94ced2d24e7b8176d3e4fd556166bc9cd676a3229d81a9768efa4b9faea048b617484a6a38bc","ssdeep":"1536:I3ob/AE4iI1VMvF3aXATIIAR8cWmdrVBJXoIgqetLfIACxOQ:+VMdaXCI9RfVB/eu","tlshash":"0e5338243615253685db31739a7fd608383158369303e970f86ce4d81da4da6e8fbefa","size":63542,"data":"","first_seen":"2023-06-19T11:17:56Z","last_seen":"2026-04-03T17:31:48.766252Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.geetest.com/get.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026challenge=cf3eb7f620707a3102b112cf47cdc342\u0026lang=zh-cn\u0026pt=0\u0026client_type=web\u0026w=mAvKoYlW3gcjJvnoy6finTUhNMrQXso8h91yOunhoSKIcOdiJ5)ovl1V7eL)irB)p7fzwSJtD(XiS37ngrb(Xl19o77FGs9fqk6ACbhYCi8XZxmqe3VUJVBAp)obVQZHZhO2vlBtkE18OcS2GbNODOAbw735OTbi16EHTc4fvKmGVAunvadnY77MnC2EHVBeWsOgUU909MAOmDKajjv9VRXdyrNq2xsB4PBdrkpTjujdTbPLi9Gf8LusehbmR(KwlJ(P7wWzHx6FzGwUY(Wiv8gS44AcOVamhy5lTdxRRULPUy8vp9(pcEubNBfS(7L7ZIddFf9Sj1uRURZuNVrTuEH6c2ucsKnyH3tpaIVRsmrWXH(bM4k5w1UpCQ6IltYHtP7XdSJauNI6pWVcknc1thiDQvZZwfV3CdWlJ3pA(EA1RtQ(P1zsInd(WS8brSLnzNFmasL8D(QgCgpv9XqBOs4TqWRKvQJILa7vqh7pxPoarWR4)O12drrDyfvIVanuzP4kwVhUsn6F6(FhOEqAjGurTovIJotd6(j1p2nvU(j9HvdvIXxq7KgncGzBcFwyfnU2vbCQLNu1egF5e(xXWKm71UX0PjoI9H2))hSSLSH)RmJbWlsDHDbmDeak22ogQhppllDJbhtQ1SHW9Nx1CcSub46UKceYC9zYwffH9tZvWchUeo1vfd6k4cZMLyqD1uJQ7d(9h1zlSFHcC9fPCjLWDVHzSor927FsXIO(iqfRalZNmtS8XLZjtZNK0iwNhTW9SNvL3KgqlJGt3ApRw5TYzkv3PwKxXZ9gMxgl70)anujPponkVyVlB0lQ)xfK8UcqXeMVRsAyE71fptMorxN76Afv4)xVbWhXPRXRDgT9(GaL0evFmCq7(CvmLQqL(oaUPFyROM2n0sobaTHS1OJFB7JbzgJQb7JxlM)dR7zia2vHwsgtAfIOiv)OUvlZ6vPgG57yIrCDMpy)tFg96ettXaIKZmp2h21cYMutpl9rSKsWXk0ymeUdi7rmn4F5NPiafMPwN)SWSfDMgkD3n0qOw4CXnb5gmCBwjfDz)c(VEdFt47XgeHcMNFTdRpgl2w9qapSYZ9GzE2gg67Od1A4vXMo5C5idTqi1VwyT55goQen)A6RB5Yi3N)JcXjyHMAFKOc)5ykEZ7kV2p7hTupLl5SUo3s2hxsZ5U8F3ez4.3aa0d5023b85da4cf5bb8cae873084e6d233e74ac3fd47a2b3c3cf3278048462cd20258b195bf264d36e965200563006d413966598c312ee733f4e836b60c3c1b71863482556ba8cd9ce79655bb04e3041fdb580cb04708e61e401bee7a6ae03badc67fb2e46aea70335d8a66c020e071039a53d426056cd4dc92796b07c4fd4\u0026callback=geetest_1763536669420","fqdn":"api.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef0731274cba8835131cebdac2a704c6","sha1":"cb4c69add706b01f31adb6506aab80938d8af974","sha256":"94c485aa71857ecd6a7a2504cda6711c72f54d4dc9fd8135f395d66c8a4da37e","sha512":"598546b70441cd20f5b221f2e224696929eccefd1e75da301db20b039457c04fadf7ae9d840bd3f28d1845bc4f5b40275c0d2d69277d59cfdf53086d4fdc7c51","ssdeep":"","tlshash":"9421d26ff55a5a3345fdd3cc7d2c2d33a7618062c2a0c03dc1a88e54329c95564a8a94","size":1270,"data":"","first_seen":"2025-11-19T07:18:32.291353Z","last_seen":"2025-11-19T07:18:32.291353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d23e36e1d5e020c7c17c6fb59cfb24b0","sha1":"49032b9bc25166cdaec5fdf13d0400cdce27ea93","sha256":"0b4008fb3d12c5cbf5985b3aa73bb2a6c5bc608febebafac52cdc5998a648e6c","sha512":"4285d743ffe803454202916de8bee14caae82a1815a4af1aab80971bb05f9559856d5147cc01edbb27ddf4cba7549b72a966e40c5a09d649fbc15047ebc94450","ssdeep":"","tlshash":"8a60000c03003c00f000ccccc00c000c333000330c00003000000f00f30030c3f00000","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.087751Z","times_seen":1409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"86f29d11652cd06d40cbadec0206c523","sha1":"2e7609513b096b1d81119aaeb7e871c03c3c3a34","sha256":"f18883030903d6a5c2011a40563013a02460a6df7758e56a57e4bc6e77f68c82","sha512":"bb119a390375d5102976c56ff966150462966b2a5723ec063bccb8e6abf564041bc4b018ab9595aa9d5d9209d00522d44df97bec5a18367970f53cf286d00c59","ssdeep":"","tlshash":"e9d0972f2cb66c7423760c3e11bada8cf5a3584c10bdd00090ede8598960fc1182ebce","size":254,"data":"","first_seen":"2025-10-06T04:10:05.760728Z","last_seen":"2025-12-26T10:51:46.798193Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2871c7c5088039983e5b6dfad6f613ae","sha1":"f6c25ac11b1aaad7838c60f5c456e7c2ebd56e1a","sha256":"e60c7913e2bba4ed614ff80191dd3e384d4897ac0fc83faecf3776abf84adcb1","sha512":"bf1a439ecefad80dbeca89b922aafbccb88315e2da0a4b56117e78328cc1655724abebb259c5f1f2faf7b42b5f0495ec1c39a214f6403677138c65fb0e819182","ssdeep":"","tlshash":"06a01122300020a08238a0f88a0a8b2e8000a80200a02a00880f88e22ea80ba2b0e808","size":76,"data":"","first_seen":"2023-03-07T12:08:39Z","last_seen":"2026-04-05T12:32:53.088763Z","times_seen":835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"901bf525bbedb8df1fada3e35e14b0bd","sha1":"7fa6b05c770a1d1ab71b42c0b0ccb273234896b3","sha256":"81590784ac8c4d2d56e3bd06e668ad49a0f1b783c57a47a799bb30efb6f8855c","sha512":"18fe0fd499d7db524186164c768cf07f558f8793aeae7f022631e684285a1b158fe46485624175eddd686ec42ba01f6c7301994b8c0b365aea9772244d71894e","ssdeep":"","tlshash":"2e70002b82002200b0022880e20c082822a088230800000000200a000200a002a80080","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.069918Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9b8e84ec31eced42c47a27947dfbabc8","sha1":"0589ff5bc7fc05b709c6d8a122990199ae38c8a3","sha256":"be18c62887de403f8303d82a815b8696b0acfb3cdc579e0714325cb03ba82f4d","sha512":"ff34b5f18234119afb382f2180bfedd35ca76fb32e5346d873e0d8394fde8d874269ecc9302149400a21a6fc8aaf750c97974c2dde1e3026a8a3f283d0376324","ssdeep":"","tlshash":"b370000283008000a000a888e0ac0008aa2202030a00002000000a0000008002aa8080","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-05T12:32:53.079831Z","times_seen":1536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/template/ooojps_jian1203/images/fixed.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"efa9a771adf882486764ae5556cba221","sha1":"f5ac01a870c074afb1350fa2d8fec86f03cacd1d","sha256":"48d4fe1316170627b9efd0355b5082c2a93d6917a3130e8143bf594459e37e59","sha512":"9df68d04cedf5b07bffe396df4630c715d2d5a406116faf88960c05e5dc2bdf10b1797c7085454f70ac767b7ee228d690149076902d9487abe23c9f0c8a02b77","ssdeep":"","tlshash":"bc316c7937d9a47086fbb13e723a9796fe35d2176102a0957c0ca4a56f30d271102ff8","size":1571,"data":"","first_seen":"2025-10-06T04:10:05.702222Z","last_seen":"2025-12-26T10:51:46.742327Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.kxdao.org/plugin.php?id=geetest3\u0026model=start\u0026t=1763536660034","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /plugin.php?id=geetest3\u0026model=start\u0026t=1763536660034 HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: JWUN_2132_lastact=1763536660%09plugin.php%09; expires=Thu, 20-Nov-2025 07:17:40 GMT; Max-Age=86400; path=/; secure\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"a037f08fefe730e34816609817c1fee7","sha1":"740b162d6edf61994488d0e60ad6f6bf3e8779be","sha256":"58278a8167a983ad12d1d19275ca09f625a3a14d09e8fd8391ed14064a2e9b31","sha512":"578d92d5852f12c136ae3d657d58c9bb2f1c9fc2dc0e6f860c1771fd1acfb3f0e198b2d16a76ef9f2baec95a35d0f4bfc2d2c916ec5d49b82b7b1b1d4cceb577","ssdeep":"","tlshash":"45b01228c24ed8e247c02731001f187165ddd042d61773bc9facc7c38a02ac42c47ce8","first_seen":"2025-11-19T07:18:32.230958Z","last_seen":"2025-11-19T07:18:32.230958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.layuicdn.com/layui/css/layui.css","fqdn":"www.layuicdn.com","domain":"layuicdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.360Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /layui/css/layui.css HTTP/1.1\r\nHost: www.layuicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T16:47:07.54892Z","times_seen":13384334,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/cache/style_64_forum_index.css?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/cache/style_64_forum_index.css?S3F HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Nov 2025 07:08:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690af7e5-1118\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4376,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4376), with no line terminators","md5":"e59fe9e041258e0a4b2e50400ff2078c","sha1":"eb5e353bd06a7bd085e47e37eb5485b44ad0cf80","sha256":"bad9a1fd0881bbdd8b015bd59d8c84e0bb8221a550075943727e73939f27c6c8","sha512":"2e7da165abdc25fe2bc92ee35bd710c53363ece480e1a426507bc7be49c9c28abcafb48f8bff8f19b51fc070c09d08ea9e92b41de86b6a0ad7887de9cd2df9e1","ssdeep":"48:lb+VVShVM3w0CTF6C1sA1BCowtWIWaZc03XROsQJnsNAWYh:lqz6l0cFaeCowtWIW50xOs5Ns","tlshash":"a691123cabfe715da037c63ab0a3954ee121c10bdf634efcb5296cb484929541a379e1","first_seen":"2025-11-19T07:18:32.236436Z","last_seen":"2025-11-19T07:18:32.236436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/jzsjiale_sms/static/js/jquery.min.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /source/plugin/jzsjiale_sms/static/js/jquery.min.js HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 07:14:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690af969-16ebb\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"6c123f43d5ebbbda71d02ceb5d8ad227","sha1":"aab2b8ea8d6f24d70f9f9f20af20e5054c9ad409","sha256":"ace97c1a8f130bbe6ba993ed743e2ec3e25d947c06291bb23e10759467ec67e7","sha512":"e335f8ed59655fa9a41801e62a148ab3c340233c5786f2f109671bb772fcfab0b81fcf8d62d02a15cdf6fcde8b4c9b6df6a2a331e037100f817825e88ae3dc24","ssdeep":"1536:K4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/IodZ7qABZnu0sFB:KGsKXAI2p0WPdbDrstfau","tlshash":"7f9308ddb2d1b06257bb20bd006f540ff236195d280d8850f129e8eabc74a4d927bfad","first_seen":"2025-09-27T22:55:53.130667Z","last_seen":"2025-12-26T10:51:46.724045Z","times_seen":8,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/study_textpane/images/masonry-docs.min.js?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /source/plugin/study_textpane/images/masonry-docs.min.js?S3F HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Aug 2021 16:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"610c0be2-89a8\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35240,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32004)","md5":"bb3e5900f64285fc26b22e3f69236e1e","sha1":"571a894b5efed15e7c39e38a04d24e2eb15f1cbb","sha256":"e1f61fcc4dfb4f0a900bee824f089a1a37be2d9f1d36c66c2e76716a5e986022","sha512":"b1628526b58cfbadcc7a9276ac0c27d9d498d3acef9a6623d858e2baed14918b67ce8d8bc3ddc1651c9d46b796f4eb52d7ba9da80acc8309653cb9fbff06d373","ssdeep":"768:IxVS/9WC3Ilgn/TBnn0FP+TLCWEZHxx/4:zlWCoOBnn0F2+Hxx/4","tlshash":"53f2c849b75174354387a1a692af010fb337207caa1680ecb7a5dcea1cb9c4e2137f79","first_seen":"2023-03-13T12:27:06Z","last_seen":"2026-03-30T00:41:21.428569Z","times_seen":17,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/attachment/common/cf/225553ttlbbebklcgkzgem.png?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/attachment/common/cf/225553ttlbbebklcgkzgem.png?S3F HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Mar 2020 14:55:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e820879-7689\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30345,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 586 x 80, 8-bit/color RGB, non-interlaced","md5":"f0528b93a935ac1f9e088d2ffab18d97","sha1":"b60c32f529ce125917a9c67aa821b9ea1780da85","sha256":"1880849bd78383ac4adecfecd183b3ea89594979c550b20fd6f9e961c71e95b2","sha512":"15ae4d7ea39356b76063177ba9facea837a606ead40d32272f9855f4c137c1d3ac22e4a7e4f740aa5f82941ce7b80cb9c6e5c46ccce553f1de78c357408a1fbb","ssdeep":"768:W4pz72ciYtjkXqdfiv1yEUyTyirWfoZu2SOMUDxQFNMf:rtwadEsxyeiri8SOdDxo4","tlshash":"1ed2f1b64a42377bd9f06c613fb364b94f7507a502c0517ea9c5c4638a48fe4d186a4f","first_seen":"2025-10-06T04:10:05.654157Z","last_seen":"2025-12-26T10:51:46.739725Z","times_seen":6,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/cache/forum.js?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/cache/forum.js?S3F HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 21:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691ce558-4d9d\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19621), with no line terminators","md5":"eb71d09ffa19eb2b907aa9671442519b","sha1":"bd33d131fa0ca8b58e5a04fc273e88e19a2886d2","sha256":"431eefbafc9f92eaeededf64fe9ff5f9fcc7d0b2cc4b3bdaa806cf57e215c818","sha512":"0855be591c9c18d57d5600f9aac1387754a2232d0be1c230567bc308212a0bf78ed13dd53f49299a6a783cb7ad3b753ac19a893efb0eb353ee542e4406cd6d68","ssdeep":"384:YBp6Doh+oQKsB2rLbdqY3lAxsrRoUlBIxIHXc033J9y65P/Ljdw4pqb/73no3M/4:M6DQ+yPbdqY3lAxsGyGS3cany8PDjdCw","tlshash":"c79209853b6c2205d6e7316259af4100ba37743483013479f869fce4ada8d69b53febe","first_seen":"2023-03-07T14:36:07Z","last_seen":"2026-04-03T17:31:48.816644Z","times_seen":79,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/static/image/common/collapsed_no.gif","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /static/image/common/collapsed_no.gif HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 275\r\nlast-modified: Mon, 15 May 2023 03:43:20 GMT\r\netag: \"6461aa58-113\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":275,"size_decoded":0,"mime_type":"image/gif","magic":"PNG image data, 17 x 17, 4-bit colormap, non-interlaced","md5":"932fc2d611f31101dfff16f4173694d2","sha1":"65976fa41b7588b22f9ca8afcd4dbc08ca00f629","sha256":"26848782aeb4790ecda1fbe7d6994726a22cde2a5ed89bac7cc13db5ee7db968","sha512":"c244fb6cacbed066813e48155d209e7401d1359ee9915be27fe5a2a40310882064d6633276ea87484978ed70cc59c1734025080048d24eea11c84d906ca47560","ssdeep":"","tlshash":"d7d02e86baa71c2a82f890a3159d0360b0474f5c43281f569204c261b8e569eaaac2e3","first_seen":"2023-05-09T07:02:52Z","last_seen":"2026-04-01T11:10:54.986101Z","times_seen":205,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?e319bc2d39bc1eebb794e72d2f34c6c9","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?e319bc2d39bc1eebb794e72d2f34c6c9 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nDate: Wed, 19 Nov 2025 07:17:42 GMT\r\nServer: apache\r\nStrict-Transport-Security: max-age=172800\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T16:47:07.54892Z","times_seen":13384334,"resource_available":true,"data":null}},"time_used":1955,"timings":{"blocked":-1,"dns":266,"connect":234,"send":0,"wait":299,"receive":0,"ssl":1155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.geetest.com/gettype.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026callback=geetest_1763536666117","fqdn":"api.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 17 Jan 2025 00:00:00 GMT","end":"Sat, 17 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:57:1F:06:90:26:7E:20:91:D8:77:96:A1:67:16:E7:C9:E8:E4:96","sha256":"FC:33:EB:97:24:88:E1:64:94:5B:E5:37:7A:E0:DB:89:4D:1D:DB:F6:96:50:B9:1D:BA:B9:28:B5:7A:69:70:95"}}},"request":{"raw":"GET /gettype.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026callback=geetest_1763536666117 HTTP/1.1\r\nHost: api.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: \r\nexpires: 0\r\npragma: no-cache\r\netag: \"91cb0275ccdf6973bd980c53e7f5471dcc6a21fc\"\r\nset-cookie: GeeTestUser=ff50c333994679f1255c3fb41293b206; expires=Thu, 19 Nov 2026 07:17:41 GMT; Path=/\r\ncache-control: must-revalidate, no-cache, no-store\r\ncontent-length: 465\r\ndate: Wed, 19 Nov 2025 07:17:40 GMT\r\neo-log-uuid: 16541983894151500788\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"d2abad7980d1043688a015efdea1b186","sha1":"91cb0275ccdf6973bd980c53e7f5471dcc6a21fc","sha256":"cf38cfe599c1d662609482810a36b27415734f6849b8b82b581a6e7c98b77c67","sha512":"93289ab8939fdcaef7ec5ab280a44321c20e5142b42292cb640eeba8003a609c49252a5d4913499f8ad481c4a8f41c7c66070c10c40032fb7cb39453c78fe11e","ssdeep":"","tlshash":"6ff0a01be803caa70ca6bc583e384236f1d8d0a246b0825ec08d9c64d2adc087b98193","first_seen":"2025-11-19T07:18:32.276029Z","last_seen":"2025-11-19T07:18:32.276029Z","times_seen":1,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":0,"dns":100,"connect":19,"send":0,"wait":227,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/template/ooojps_jian1203/images/fixed.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/fixed.js HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Jan 2021 03:33:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5ffe69ed-623\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1571,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF, CR line terminators","md5":"efa9a771adf882486764ae5556cba221","sha1":"f5ac01a870c074afb1350fa2d8fec86f03cacd1d","sha256":"48d4fe1316170627b9efd0355b5082c2a93d6917a3130e8143bf594459e37e59","sha512":"9df68d04cedf5b07bffe396df4630c715d2d5a406116faf88960c05e5dc2bdf10b1797c7085454f70ac767b7ee228d690149076902d9487abe23c9f0c8a02b77","ssdeep":"","tlshash":"bc316c7937d9a47086fbb13e723a9796fe35d2176102a0957c0ca4a56f30d271102ff8","first_seen":"2025-10-06T04:10:05.702222Z","last_seen":"2025-12-26T10:51:46.742327Z","times_seen":6,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/template/ooojps_jian1203/images/nav_line.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:15:48 GMT","end":"Sat, 24 Jan 2026 01:15:47 GMT"},"fingerprint":{"sha1":"4B:E5:D2:ED:ED:94:F9:0F:C3:16:6D:7A:1E:39:DB:11:77:9B:A7:7C","sha256":"1E:8A:DA:99:C9:72:7D:1C:48:82:92:D7:41:FF:FC:D8:21:DD:AC:9D:28:5B:07:8F:B5:B2:5F:EA:34:1C:5C:0A"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/nav_line.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 191\r\nlast-modified: Wed, 13 Jan 2021 03:33:01 GMT\r\netag: \"5ffe69ed-bf\"\r\nexpires: Fri, 19 Dec 2025 07:17:40 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=4cea8a34da8d272ddafdcd475e0eeb4c; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=eb1dbf5a1b1151c8ccf824f04403fb84; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 36, 8-bit/color RGBA, non-interlaced","md5":"a7ddcd0afec67ccc5f6efd302a8201b3","sha1":"099c96e45d8376d512e95a1d61be2ef166021c99","sha256":"3a849c0d18b04788e4b787062442435eadfb81188e170919ef2278a3dc195b95","sha512":"79f7e72c4865426482650f3bacc7172457303bfacd1fe3eed03a43162611a5793bcb7d39e0b488f2b1a59af58c3cf8383df306bb58fd6d76e9c43068f1a4468b","ssdeep":"","tlshash":"80c0c0c203c02e5c8d3f549303c3021094d31901072f3c15f12f505e3d52d03e8b8312","first_seen":"2025-10-06T04:10:05.713692Z","last_seen":"2025-12-26T10:51:46.750696Z","times_seen":6,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":154,"send":0,"wait":273,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/template/ooojps_jian1203/images/logo.png","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/logo.png HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Jan 2021 08:19:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5ffead28-138f\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 52, 8-bit/color RGBA, non-interlaced","md5":"7e25e689754de9ae8eb668b8b5b74219","sha1":"ffed4d48b0563dbe3ca74575069aeab2e2371986","sha256":"b3676780edfbe6da45eb7fd70f799ab0323b2de4e42e9c0aad2bd7613d764288","sha512":"948f4c2fb2f40320706145c0d719f41f502e4731436525923d33dea816c7608f518d49b269112a7ea7ab00b376ed90fb889c31b6d2de984cc091f26d90b59ebd","ssdeep":"96:UMYR2Wzy9lkskZ6B/apcrk7l4Hn8n6fvSmy6mJymYq1J+x3ZI1O2K42K:4i9ub6BGU8M9y6mJuq+JW13","tlshash":"d0a15cec83d32251d494a85106e24019ed639dc54be83ce7a4db701af64a0a7b06a7bf","first_seen":"2025-10-06T04:10:05.697917Z","last_seen":"2025-12-26T10:51:46.72131Z","times_seen":6,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/attachment/common/d6/common_40_icon.png","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/attachment/common/d6/common_40_icon.png HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2020 15:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e88aa9e-4dc\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"f4921849126bdb770b73488d2e1f8126","sha1":"427c4a565d30954922851456a1161fdd45af231c","sha256":"697ebdb62b20695fda755c7244d1dcf77be14dc22937729bfbb4116b495763f5","sha512":"27a567da0e24c9b098691f22455ea7e9e592402e121c1910955d126faa922b43711f51bb6df1725b82fcc327cbac8c3dc381424d86310859b12dfe7dd057c863","ssdeep":"","tlshash":"c3211705b702aa28c88c13b0da35949cf3f2f3cb90a2a0150e4d5e0d8f237ed041f31a","first_seen":"2025-10-06T04:10:05.704346Z","last_seen":"2025-12-26T10:51:46.767142Z","times_seen":6,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/cache/common.js?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/cache/common.js?S3F HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 21:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691ce558-f836\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63252), with no line terminators","md5":"4d4bfc33fa3badc42d9200eb8f47bcb2","sha1":"3f89d367d4ef99f06c406a8eea20339ef96cef8f","sha256":"d049c37e84bb09c3c4620deaa1b0700aeed96b3726aee6eaad48000771a35251","sha512":"14078f4dac91869f55256a506c9039fb841172573af9f22ab49b94ced2d24e7b8176d3e4fd556166bc9cd676a3229d81a9768efa4b9faea048b617484a6a38bc","ssdeep":"1536:I3ob/AE4iI1VMvF3aXATIIAR8cWmdrVBJXoIgqetLfIACxOQ:+VMdaXCI9RfVB/eu","tlshash":"0e5338243615253685db31739a7fd608383158369303e970f86ce4d81da4da6e8fbefa","first_seen":"2023-06-19T11:17:56Z","last_seen":"2026-04-03T17:31:48.766252Z","times_seen":98,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T059M000000tBOCv3ledhE.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T059M000000tBOCv3ledhE.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 11:25:36 GMT\r\nserver: ImgHttp3.0.0\r\ndate: Fri, 07 Nov 2025 09:55:07 GMT\r\nexpires: Mon, 10 Nov 2025 09:55:07 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 2e16bf4eb176e72ccb538a08cd999efa\r\nx-delay: 9144 us\r\nx-info: real data\r\nx-bcheck: 0_1\r\nx-cpt: filename=0\r\nuser-returncode: 0\r\nx-datasrc: 1\r\nx-reqgue: 0\r\nsize: 89214\r\nchid: 0\r\nfid: 0\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 238274\r\ncontent-length: 89214\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 692483347088209811\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38c144e3219cb456e111e6c3e075b8ee","sha1":"3fd06519b52f0b66263b4f4851b67cbbe8d17670","sha256":"12995becbe29689092ac2a4bb3443ed264c6341982cafab6fe44fbcc21854a8b","sha512":"febebd92fab6cd5e71baf66e9eee9bcc2153ed98b024b7ba2f1cff3d614b0e71ff89560f0c2c935eafbe7dd13032fadc9350a1cd7c99fec24d64798d1ad1afc5","ssdeep":"1536:uGIeNwNpinNiaRqPWvFMNUPEEPJjNDb3r7JfasXtCmNAn65yTLSXWl5gE:PIBpcrRqqRsEhjl77JamN46E3vr","tlshash":"3193022c0cd2a22e861a43ff7959b19f124dcf12d68bf1535800ac5d26e6d2ff265f16","first_seen":"2025-10-06T04:10:05.731821Z","last_seen":"2025-11-19T07:18:32.287792Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6443,"timings":{"blocked":2730,"dns":1917,"connect":253,"send":0,"wait":737,"receive":209,"ssl":594},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/template/ooojps_jian1203/images/tbbankuai.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:15:48 GMT","end":"Sat, 24 Jan 2026 01:15:47 GMT"},"fingerprint":{"sha1":"4B:E5:D2:ED:ED:94:F9:0F:C3:16:6D:7A:1E:39:DB:11:77:9B:A7:7C","sha256":"1E:8A:DA:99:C9:72:7D:1C:48:82:92:D7:41:FF:FC:D8:21:DD:AC:9D:28:5B:07:8F:B5:B2:5F:EA:34:1C:5C:0A"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/tbbankuai.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 424\r\nlast-modified: Wed, 13 Jan 2021 03:33:01 GMT\r\netag: \"5ffe69ed-1a8\"\r\nexpires: Fri, 19 Dec 2025 07:17:40 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=4cea8a34da8d272ddafdcd475e0eeb4c; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=e6bc556377c954b963ade226233b2015; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 19, 8-bit/color RGBA, non-interlaced","md5":"5167b97b211dd2fe959aef04a6149679","sha1":"57862b59e3e11a478731f965d3c5835d16da2cd8","sha256":"7123002f94ba915994f21fb444708f4b94a00daac9f77ee9eaa9ca1596415ec3","sha512":"a22783757ed16417f50e44ba1377d68e1b6e4628efe98f720a966deaba70b065971e897303df2f2a6d9151662a3c29cd3a230dc941e6fc4bcd2a7af44753fda6","ssdeep":"","tlshash":"41e05c81d670977cef94e8590913c5259866952d43a0e05850e2b3286aeafba0aac08a","first_seen":"2024-08-19T22:39:33.03865Z","last_seen":"2025-12-26T10:51:46.717472Z","times_seen":7,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/static/js/fullpage.9.2.0-guwyxh.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:41.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 17 Jan 2025 00:00:00 GMT","end":"Sat, 17 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:57:1F:06:90:26:7E:20:91:D8:77:96:A1:67:16:E7:C9:E8:E4:96","sha256":"FC:33:EB:97:24:88:E1:64:94:5B:E5:37:7A:E0:DB:89:4D:1D:DB:F6:96:50:B9:1D:BA:B9:28:B5:7A:69:70:95"}}},"request":{"raw":"GET /static/js/fullpage.9.2.0-guwyxh.js HTTP/1.1\r\nHost: static.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 07:17:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-ray: 9a0dede4cf85b51e-OSL\r\ncf-cache-status: HIT\r\nage: 1896386\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 07:17:41 GMT\r\nlast-modified: Tue, 29 Jul 2025 14:44:15 GMT\r\nvary: Accept-Encoding\r\ncontent-md5: X5W99CAPCH7vgW3tstvX8A==\r\nx-oss-hash-crc64ecma: 15691279645251471329\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 68959A1DD3D7CB383980F33A\r\nx-oss-server-time: 20\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":304290,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f95bdf4200f087eef816dedb2dbd7f0","sha1":"aaab80cdd50dc5f36050b04b5f7cc0079d667837","sha256":"923a147d20ec0a941a44ab815991034fee5af16d5bb59fa23dcc86eb1a8734e1","sha512":"c51e522bca043becff365127a0477d9cacf524c5d491729712017639b4a3527408c17b95829da72e8b2cce39fd3b932ecd57bbc9781e47ba6e51d6a988709d52","ssdeep":"3072:9Zoz8Co64eZ7wKHYS+ou4hyZtCegH/7tdVvVwhQSuL6BL0lBjMANErWx:9heNPHxMYegfpdpTplBjMyErWx","tlshash":"0554b8e233913eda9577a62f4c3f3906a2b429600547da80363ff3499f78786c39561b","first_seen":"2025-07-30T16:54:45.340584Z","last_seen":"2026-03-27T14:32:11.051928Z","times_seen":65,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":35,"connect":1,"send":0,"wait":46,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.geetest.com/get.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026challenge=cf3eb7f620707a3102b112cf47cdc342\u0026lang=zh-cn\u0026pt=0\u0026client_type=web\u0026w=mAvKoYlW3gcjJvnoy6finTUhNMrQXso8h91yOunhoSKIcOdiJ5)ovl1V7eL)irB)p7fzwSJtD(XiS37ngrb(Xl19o77FGs9fqk6ACbhYCi8XZxmqe3VUJVBAp)obVQZHZhO2vlBtkE18OcS2GbNODOAbw735OTbi16EHTc4fvKmGVAunvadnY77MnC2EHVBeWsOgUU909MAOmDKajjv9VRXdyrNq2xsB4PBdrkpTjujdTbPLi9Gf8LusehbmR(KwlJ(P7wWzHx6FzGwUY(Wiv8gS44AcOVamhy5lTdxRRULPUy8vp9(pcEubNBfS(7L7ZIddFf9Sj1uRURZuNVrTuEH6c2ucsKnyH3tpaIVRsmrWXH(bM4k5w1UpCQ6IltYHtP7XdSJauNI6pWVcknc1thiDQvZZwfV3CdWlJ3pA(EA1RtQ(P1zsInd(WS8brSLnzNFmasL8D(QgCgpv9XqBOs4TqWRKvQJILa7vqh7pxPoarWR4)O12drrDyfvIVanuzP4kwVhUsn6F6(FhOEqAjGurTovIJotd6(j1p2nvU(j9HvdvIXxq7KgncGzBcFwyfnU2vbCQLNu1egF5e(xXWKm71UX0PjoI9H2))hSSLSH)RmJbWlsDHDbmDeak22ogQhppllDJbhtQ1SHW9Nx1CcSub46UKceYC9zYwffH9tZvWchUeo1vfd6k4cZMLyqD1uJQ7d(9h1zlSFHcC9fPCjLWDVHzSor927FsXIO(iqfRalZNmtS8XLZjtZNK0iwNhTW9SNvL3KgqlJGt3ApRw5TYzkv3PwKxXZ9gMxgl70)anujPponkVyVlB0lQ)xfK8UcqXeMVRsAyE71fptMorxN76Afv4)xVbWhXPRXRDgT9(GaL0evFmCq7(CvmLQqL(oaUPFyROM2n0sobaTHS1OJFB7JbzgJQb7JxlM)dR7zia2vHwsgtAfIOiv)OUvlZ6vPgG57yIrCDMpy)tFg96ettXaIKZmp2h21cYMutpl9rSKsWXk0ymeUdi7rmn4F5NPiafMPwN)SWSfDMgkD3n0qOw4CXnb5gmCBwjfDz)c(VEdFt47XgeHcMNFTdRpgl2w9qapSYZ9GzE2gg67Od1A4vXMo5C5idTqi1VwyT55goQen)A6RB5Yi3N)JcXjyHMAFKOc)5ykEZ7kV2p7hTupLl5SUo3s2hxsZ5U8F3ez4.3aa0d5023b85da4cf5bb8cae873084e6d233e74ac3fd47a2b3c3cf3278048462cd20258b195bf264d36e965200563006d413966598c312ee733f4e836b60c3c1b71863482556ba8cd9ce79655bb04e3041fdb580cb04708e61e401bee7a6ae03badc67fb2e46aea70335d8a66c020e071039a53d426056cd4dc92796b07c4fd4\u0026callback=geetest_1763536669420","fqdn":"api.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:41.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 17 Jan 2025 00:00:00 GMT","end":"Sat, 17 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:57:1F:06:90:26:7E:20:91:D8:77:96:A1:67:16:E7:C9:E8:E4:96","sha256":"FC:33:EB:97:24:88:E1:64:94:5B:E5:37:7A:E0:DB:89:4D:1D:DB:F6:96:50:B9:1D:BA:B9:28:B5:7A:69:70:95"}}},"request":{"raw":"GET /get.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026challenge=cf3eb7f620707a3102b112cf47cdc342\u0026lang=zh-cn\u0026pt=0\u0026client_type=web\u0026w=mAvKoYlW3gcjJvnoy6finTUhNMrQXso8h91yOunhoSKIcOdiJ5)ovl1V7eL)irB)p7fzwSJtD(XiS37ngrb(Xl19o77FGs9fqk6ACbhYCi8XZxmqe3VUJVBAp)obVQZHZhO2vlBtkE18OcS2GbNODOAbw735OTbi16EHTc4fvKmGVAunvadnY77MnC2EHVBeWsOgUU909MAOmDKajjv9VRXdyrNq2xsB4PBdrkpTjujdTbPLi9Gf8LusehbmR(KwlJ(P7wWzHx6FzGwUY(Wiv8gS44AcOVamhy5lTdxRRULPUy8vp9(pcEubNBfS(7L7ZIddFf9Sj1uRURZuNVrTuEH6c2ucsKnyH3tpaIVRsmrWXH(bM4k5w1UpCQ6IltYHtP7XdSJauNI6pWVcknc1thiDQvZZwfV3CdWlJ3pA(EA1RtQ(P1zsInd(WS8brSLnzNFmasL8D(QgCgpv9XqBOs4TqWRKvQJILa7vqh7pxPoarWR4)O12drrDyfvIVanuzP4kwVhUsn6F6(FhOEqAjGurTovIJotd6(j1p2nvU(j9HvdvIXxq7KgncGzBcFwyfnU2vbCQLNu1egF5e(xXWKm71UX0PjoI9H2))hSSLSH)RmJbWlsDHDbmDeak22ogQhppllDJbhtQ1SHW9Nx1CcSub46UKceYC9zYwffH9tZvWchUeo1vfd6k4cZMLyqD1uJQ7d(9h1zlSFHcC9fPCjLWDVHzSor927FsXIO(iqfRalZNmtS8XLZjtZNK0iwNhTW9SNvL3KgqlJGt3ApRw5TYzkv3PwKxXZ9gMxgl70)anujPponkVyVlB0lQ)xfK8UcqXeMVRsAyE71fptMorxN76Afv4)xVbWhXPRXRDgT9(GaL0evFmCq7(CvmLQqL(oaUPFyROM2n0sobaTHS1OJFB7JbzgJQb7JxlM)dR7zia2vHwsgtAfIOiv)OUvlZ6vPgG57yIrCDMpy)tFg96ettXaIKZmp2h21cYMutpl9rSKsWXk0ymeUdi7rmn4F5NPiafMPwN)SWSfDMgkD3n0qOw4CXnb5gmCBwjfDz)c(VEdFt47XgeHcMNFTdRpgl2w9qapSYZ9GzE2gg67Od1A4vXMo5C5idTqi1VwyT55goQen)A6RB5Yi3N)JcXjyHMAFKOc)5ykEZ7kV2p7hTupLl5SUo3s2hxsZ5U8F3ez4.3aa0d5023b85da4cf5bb8cae873084e6d233e74ac3fd47a2b3c3cf3278048462cd20258b195bf264d36e965200563006d413966598c312ee733f4e836b60c3c1b71863482556ba8cd9ce79655bb04e3041fdb580cb04708e61e401bee7a6ae03badc67fb2e46aea70335d8a66c020e071039a53d426056cd4dc92796b07c4fd4\u0026callback=geetest_1763536669420 HTTP/1.1\r\nHost: api.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: \r\nexpires: 0\r\npragma: no-cache\r\netag: \"cb4c69add706b01f31adb6506aab80938d8af974\"\r\nset-cookie: GeeTestUser=bb6dc6df59b59ee02db43e715ba92d84; expires=Thu, 19 Nov 2026 07:17:41 GMT; Path=/\r\ncache-control: must-revalidate, no-cache, no-store\r\ncontent-length: 1270\r\ndate: Wed, 19 Nov 2025 07:17:41 GMT\r\neo-log-uuid: 12920834788679993087\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1270), with no line terminators","md5":"ef0731274cba8835131cebdac2a704c6","sha1":"cb4c69add706b01f31adb6506aab80938d8af974","sha256":"94c485aa71857ecd6a7a2504cda6711c72f54d4dc9fd8135f395d66c8a4da37e","sha512":"598546b70441cd20f5b221f2e224696929eccefd1e75da301db20b039457c04fadf7ae9d840bd3f28d1845bc4f5b40275c0d2d69277d59cfdf53086d4fdc7c51","ssdeep":"","tlshash":"9421d26ff55a5a3345fdd3cc7d2c2d33a7618062c2a0c03dc1a88e54329c95564a8a94","first_seen":"2025-11-19T07:18:32.291353Z","last_seen":"2025-11-19T07:18:32.291353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wx.y.gtimg.cn/music/photo_new/T056M000002vpDku3xX3oh.png","fqdn":"wx.y.gtimg.cn","domain":"gtimg.cn","tld":"cn"},"ip":{"addr":"203.205.137.101","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.y.gtimg.cn","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:31:F5:13:FA:54:E9:39:5E:08:17:05:71:91:69:28:3D:EB:3E:B3","sha256":"1F:E1:CC:9D:DD:82:71:8B:2A:3E:ED:F7:16:87:FC:28:67:F6:2E:36:E9:F5:33:7E:20:97:68:33:DB:49:58:9F"}}},"request":{"raw":"GET /music/photo_new/T056M000002vpDku3xX3oh.png HTTP/1.1\r\nHost: wx.y.gtimg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 04 Nov 2025 00:26:04 GMT\r\nServer: nws_static_mid\r\nDate: Fri, 07 Nov 2025 09:57:32 GMT\r\nExpires: Sun, 07 Dec 2025 09:57:32 GMT\r\nContent-Type: image/webp\r\nX-Verify-Code: f53bf4813df3706e28d805bd66731ced\r\nX-Daa-Tunnel: hop_count=1\r\nCache-Control: max-age=2592000\r\nAge: 1027208\r\nContent-Length: 17674\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16746982739693744359\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept\r\nX-Webp-Req: accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d54a09c5c43ee4717bd4e333e8bf9a36","sha1":"2a319048f2f3c46053766083620e9f9edb76e756","sha256":"8bfadc70ed8ad518e2aa116b9ca07b4193df28f0ab6b9f3ace976f3b4b15fbfe","sha512":"a9dc8aa6f803394408794aea3daf6601eefdf6a3365f7b449b62dd3e45c10276f356af8bd37f83b55d6b406bad45b511e11310bc0c380e3c65002c88e64ce18f","ssdeep":"384:sHQ/8+1OwnHASbbTRDmCPjkvllodSJssH1CYesxg:NEABbXc5vlSmbesxg","tlshash":"1c82cf632d56e358b22aa3f914b30d5a700a205fc299b3f9c6e156678a0cc0d7cb7b94","first_seen":"2025-10-06T04:10:05.669045Z","last_seen":"2025-11-19T07:18:32.29262Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2292,"timings":{"blocked":-1,"dns":1353,"connect":262,"send":0,"wait":263,"receive":1,"ssl":413},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/attachment/common/a1/common_42_icon.png","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/attachment/common/a1/common_42_icon.png HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2020 15:28:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e88a7b9-f4a\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"9c9987d34f274f7a5982ed7230f44493","sha1":"9d131e4410ecdc5d6c2b0c3ca2c83ea8b1818c61","sha256":"16190191879e0996091daa2a0c517533d9a3a76efcd034dcc2cdd771c8f996ab","sha512":"648a3485546c71fdd8172c46e86283c5ef553afed00e8d1e0d4441b66e95f31cbe202bba3cc7164c3507bb5d9bf188f9951ad772647b0577ae02e1f888900fc2","ssdeep":"","tlshash":"a2814cdaf4807f1a914d966e4dd51357073b835899c2e4dbbdadc55ba8300f08c4e4d3","first_seen":"2025-10-06T04:10:05.651288Z","last_seen":"2025-12-26T10:51:46.749893Z","times_seen":6,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.layuicdn.com/layui/layui.js","fqdn":"www.layuicdn.com","domain":"layuicdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.700Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /layui/layui.js HTTP/1.1\r\nHost: www.layuicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T16:47:07.54892Z","times_seen":13384334,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":355,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/jzsjiale_sms/static/js/jquery.min.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /source/plugin/jzsjiale_sms/static/js/jquery.min.js HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09home.php%09misc; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c; JWUN_2132_sendmail=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 07:14:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690af969-16ebb\"\r\nexpires: Wed, 19 Nov 2025 19:17:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"6c123f43d5ebbbda71d02ceb5d8ad227","sha1":"aab2b8ea8d6f24d70f9f9f20af20e5054c9ad409","sha256":"ace97c1a8f130bbe6ba993ed743e2ec3e25d947c06291bb23e10759467ec67e7","sha512":"e335f8ed59655fa9a41801e62a148ab3c340233c5786f2f109671bb772fcfab0b81fcf8d62d02a15cdf6fcde8b4c9b6df6a2a331e037100f817825e88ae3dc24","ssdeep":"1536:K4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/IodZ7qABZnu0sFB:KGsKXAI2p0WPdbDrstfau","tlshash":"7f9308ddb2d1b06257bb20bd006f540ff236195d280d8850f129e8eabc74a4d927bfad","first_seen":"2025-09-27T22:55:53.130667Z","last_seen":"2025-12-26T10:51:46.724045Z","times_seen":8,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/static/wind/style_https.1.5.8.css","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:41.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 17 Jan 2025 00:00:00 GMT","end":"Sat, 17 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:57:1F:06:90:26:7E:20:91:D8:77:96:A1:67:16:E7:C9:E8:E4:96","sha256":"FC:33:EB:97:24:88:E1:64:94:5B:E5:37:7A:E0:DB:89:4D:1D:DB:F6:96:50:B9:1D:BA:B9:28:B5:7A:69:70:95"}}},"request":{"raw":"GET /static/wind/style_https.1.5.8.css HTTP/1.1\r\nHost: static.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 07:17:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-ray: 9a0dede7f988b51e-OSL\r\ncf-cache-status: HIT\r\nage: 468606\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: \"3FB6AACFD5AE2D3894F2F00B0D5F3236\"\r\nexpires: Thu, 20 Nov 2025 07:17:41 GMT\r\nlast-modified: Mon, 28 Jul 2025 16:08:15 GMT\r\nvary: Accept-Encoding\r\ncontent-md5: P7aqz9WuLTiU8vALDV8yNg==\r\nx-oss-hash-crc64ecma: 8727683345402674844\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 689233FACDAAFE373676A314\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":40702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40701)","md5":"3fb6aacfd5ae2d3894f2f00b0d5f3236","sha1":"f15fd4bebcd69660aced9ddaa6d0bc9b03e903a3","sha256":"8ba195fffe0097e44a5dd29c35c092f10039e126cc9c4113330e8bf690c2461e","sha512":"855d94ad7b87e9a506fe106dc61a84575a75da71175e1439c4d1fd27b0c1e2a1563529cfe23858ee2d5f5e330ab65014d405d4b29eff78fe9b06680b9b8920f6","ssdeep":"384:wuYullffgfx8pP95J7OgulVRpxOlffNwWVRT:5lffsC95Jhu4lffZ","tlshash":"2a03d023f413a288943f8727edc87e11d46cc617913b8b9fab55e4298701cd6b4f7a4a","first_seen":"2023-04-07T12:22:13Z","last_seen":"2026-03-27T14:32:11.04823Z","times_seen":178,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/static/image/common/qq_login.gif","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /static/image/common/qq_login.gif HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 15 May 2023 03:43:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6461aa58-c80\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3200,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 124 x 24","md5":"5303890a49bf80d5d9227155cc844e29","sha1":"5367aba5ebe04fdf559f3be193be3b7940a948e8","sha256":"e401693c5f4f22c6b1233bdfcac8e92aa6fef620f304ecfabe29b704195afd05","sha512":"1fe0f6ef591acbf394f2091053a2d8db8e7b21c76ac56cc7b14036803749329d5564d1b2c40d9bd3c38ccc999f1818c8a207f48df9f3b9f3d906a32e3aaa4ec1","ssdeep":"","tlshash":"a8613bceb68499121084d8f11c6bc9e1ac1cea0514dce9ee38b8cd2813bc5e2964a7db","first_seen":"2023-05-17T08:59:28Z","last_seen":"2026-03-29T13:50:23.424101Z","times_seen":103,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/attachment/study_textpane/slide/202402/20/200348q5ongoh7nhnvvz9h.gif","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/attachment/study_textpane/slide/202402/20/200348q5ongoh7nhnvvz9h.gif HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/gif\r\nlast-modified: Tue, 20 Feb 2024 12:03:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d49524-58fb\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22779,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 34","md5":"d26611bb0d313acfdec59e3c3d1640a2","sha1":"0c121fa2c6635d7995f0dce3e53212147700faa6","sha256":"d8ec432e8601bfa2f4f58d893d7bc13fea53d07ffe543744fdb4029b1222d817","sha512":"52df1983595970a691f37fa9b4049e39575c20963d0def2903bc2aabd2f98e7d2f5774383f61f8529ff5d63ea88be8af64fcbbf7a669044fe1b9d9e9cbda6faf","ssdeep":"192:NmS/BR+Gx4unkoruXrPsubaGK5zZuy/BErY/IunkoruXrPsubaGK5zZuy/Ba9XwZ:8PE1YzQFYK46oVUrP5Vz","tlshash":"1fa28ecffce84020c2b945f574a74b85b4a947e040d4511a580a7d8f9dca2ebb279aef","first_seen":"2025-10-06T04:10:05.723018Z","last_seen":"2025-12-26T10:51:46.740639Z","times_seen":6,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wx.y.gtimg.cn/music/photo_new/T059M000001EWUsk1A6C8k.gif","fqdn":"wx.y.gtimg.cn","domain":"gtimg.cn","tld":"cn"},"ip":{"addr":"203.205.137.101","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.y.gtimg.cn","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:31:F5:13:FA:54:E9:39:5E:08:17:05:71:91:69:28:3D:EB:3E:B3","sha256":"1F:E1:CC:9D:DD:82:71:8B:2A:3E:ED:F7:16:87:FC:28:67:F6:2E:36:E9:F5:33:7E:20:97:68:33:DB:49:58:9F"}}},"request":{"raw":"GET /music/photo_new/T059M000001EWUsk1A6C8k.gif HTTP/1.1\r\nHost: wx.y.gtimg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 22 Oct 2025 11:51:43 GMT\r\nServer: nws_static_mid\r\nDate: Tue, 11 Nov 2025 03:49:03 GMT\r\nExpires: Thu, 11 Dec 2025 03:49:03 GMT\r\nContent-Type: image/webp\r\nX-Verify-Code: 862c1f551ce8c1acd3b9061f67a12113\r\nX-Daa-Tunnel: hop_count=1\r\nCache-Control: max-age=2592000\r\nAge: 703719\r\nContent-Length: 160032\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1517829264182751078\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept\r\nX-Webp-Req: accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":160032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6272ed140e283c69efee58ae17652cca","sha1":"96b5ad37d2dd43ac37e5177078fec1478a219dda","sha256":"128754973eef2b05bfe4cd9c7d7a0c0cd57043260c84c8b133657b7f7e0f50c7","sha512":"3ef916cbba2d8df7d32eac38bc9614489bc04f298c646207ee46af004e89665dbcaeb53d0cac66e4029c1f6c149e136de66791da94c59f7f98e475ac25048867","ssdeep":"3072:DXDeC6dlo18t54+wJ/5+0agzMT/G6tc+eUEDLt3/oEk5YdWtz:Pejo18t5Xw+ezsxc+Kvt3wEoYq","tlshash":"5ef31317bbb5583ec98c2c77d0a8f069d1e7c815c2824936ad3aa896517f4cf0f9db81","first_seen":"2025-10-06T04:10:05.662074Z","last_seen":"2025-12-26T10:51:46.754105Z","times_seen":6,"resource_available":false,"data":null}},"time_used":5520,"timings":{"blocked":2292,"dns":1370,"connect":263,"send":0,"wait":264,"receive":630,"ssl":697},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T056M000002nmAEg1zfl4y.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T056M000002nmAEg1zfl4y.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 28 Sep 2025 22:16:27 GMT\r\nserver: NWS_SSD_MID\r\ndate: Sun, 28 Sep 2025 16:00:59 GMT\r\nexpires: Wed, 01 Oct 2025 16:00:59 GMT\r\ncontent-type: image/webp\r\nx-verify-code: c0249c8fd5fc303a98a3114bf5068c3f\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 242185\r\ncontent-length: 176352\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 18192786187332425405\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":176352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b9687cb2d8759cb4b69cca0b6f87c33","sha1":"37a1cc9dfef3bfcd6c63433b2127c3d17ccdfb23","sha256":"a6f67c4e9abf6efa5d6dad00fc38e17206dd2fc7b215ac90a8fed06d6b1abc6c","sha512":"f5e2d9537b46bb7bee89fe4081f237d7d041c81bf28562f46a31fa9ede4761da8c377a20ac2f5826e975e6aa6a869b9c64ad5aac27b38695779cb64df82c74d8","ssdeep":"3072:EH+qx2oIuOXtjG6PqYi4rSRdP2b9EfXjC52oqCnsey9rS7M4ESkdjbQer7F4:4n2nuSj9PxfpyXj8qSseyA9kT7y","tlshash":"5304237a855734c5d1e730bf774517e6db0ee48f3a1ac6c81ca85789b4c86b8376ad00","first_seen":"2025-10-06T04:10:05.673152Z","last_seen":"2025-12-26T10:51:46.724678Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7008,"timings":{"blocked":2916,"dns":1914,"connect":256,"send":0,"wait":760,"receive":381,"ssl":779},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/favicon.ico","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:43.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536660%09plugin.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c; JWUN_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Sun, 19 Oct 2025 09:54:44 GMT\r\netag: \"68f4b564-25be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"1c032804cfe07894ab3885a56514c17c","sha1":"e3fc174423f251fde4e70e187636205c8c95b2a6","sha256":"aea4b4fcb150b161eea1032b2789923116a0c3d6c15345f2b721b4aff961f297","sha512":"59c79a3954d970a189be8b3165c0b5a9644bf44f79c9baa5ca0a2159c4556e056c2bac06db232149d454427cd484a07b53930fe8f0101d2d8598f8bc706c5f2d","ssdeep":"48:9U3N6hFwXeY49dJKQX6ONqtuj6cxY+UBSVJH5RM:91hE4dUpO8ti6cC+9VJH5W","tlshash":"6e12d5e7a3417029f900ef7104828c42feeaf9a9ee19b4ad0d7d59527617cce264067f","first_seen":"2025-10-06T04:10:05.70728Z","last_seen":"2025-12-26T10:51:46.736768Z","times_seen":6,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/study_textpane/images/jquery-1.8.3.min.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /source/plugin/study_textpane/images/jquery-1.8.3.min.js HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Aug 2021 16:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"610c0be2-16dc5\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65482), with CRLF line terminators","md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-04-05T13:50:50.487095Z","times_seen":20541,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/geetest3/js/gt3-init.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /source/plugin/geetest3/js/gt3-init.js HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Oct 2021 01:13:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6178a7a8-780\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16714c3f957f541876828de4d31ba5d3","sha1":"c8763edece48a3cb4ac0a3fbe9cdf6083b045aa3","sha256":"e80c80c96999573c0cbc3940f1a8f927b8c3697eec3d72db6315c2ce0d0aab45","sha512":"867e14c5d311108de1d439c961d7f984f4b251c9dd18143c3d4fb609ff33aa5ed01d8ae4ed6aa59aea5f9c9a0e8b594458e5cea6c3f2e7635dddabfbad22e69f","ssdeep":"","tlshash":"1641fd26b2aa8185082bb5ddcb6f4244f42a90277005ce603c0d92886f1503c62bffcf","first_seen":"2025-10-06T04:10:05.675079Z","last_seen":"2026-03-08T21:57:16.213113Z","times_seen":8,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/attachment/common/d9/common_46_icon.png","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/attachment/common/d9/common_46_icon.png HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2020 14:46:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e889db7-b8d\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"755268739777a1ca430ca95e0dd4e780","sha1":"682c05b843a0568ac1654ab41cb9c0e5dede4709","sha256":"4b7c32130584dd9b99fee9ee7fd74a402709bec271865c5a58c5ff2a021231c9","sha512":"19aabf433d5735aa179418ef82fe5e8c18fdc4ac91bc2f957c5c3205180074295de065284c19961b5065e926b688d45c895c1f8d2295bafee3b603d7d2f1e9ea","ssdeep":"","tlshash":"21514cddb4207f09e257229647e218c1c6771cc20ea75f5cf518ec7854c4bb564f2660","first_seen":"2025-10-06T04:10:05.729653Z","last_seen":"2025-12-26T10:51:46.749063Z","times_seen":6,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.layuicdn.com/layui/css/layui.css","fqdn":"www.layuicdn.com","domain":"layuicdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.699Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /layui/css/layui.css HTTP/1.1\r\nHost: www.layuicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T16:47:07.54892Z","times_seen":13384334,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":357,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/jzsjiale_sms/static/images/login.png","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /source/plugin/jzsjiale_sms/static/images/login.png HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Nov 2025 06:55:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690af4fe-a07\"\r\nexpires: Fri, 19 Dec 2025 07:17:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 24, 8-bit/color RGBA, non-interlaced","md5":"a5aa31dbcdad0960b93c8f20e6adaf3e","sha1":"d72b9828e428bd9be6c37b6f8139878f66353014","sha256":"827de3d13c7e7c930a821371d6530358f3877cbfec19ac5e4077741562ec9fec","sha512":"62649d7b83bc3cb21eda4f398f0089aedad48e2f5672e4227ab465f99f822e8e1238d74bbc2365d29acf81503fdf47f9dc4a236dba93a2bc901d2681516637c1","ssdeep":"","tlshash":"40511cecb8d0a806ff56acc055f94433254902c16c40e1aa7addca65deb03fb80581db","first_seen":"2025-08-10T16:41:20.567639Z","last_seen":"2026-01-03T20:25:00.988546Z","times_seen":11,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wx.y.gtimg.cn/music/photo_new/T053XD000004Ziflf4cbjjm.gif","fqdn":"wx.y.gtimg.cn","domain":"gtimg.cn","tld":"cn"},"ip":{"addr":"203.205.137.101","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.y.gtimg.cn","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:31:F5:13:FA:54:E9:39:5E:08:17:05:71:91:69:28:3D:EB:3E:B3","sha256":"1F:E1:CC:9D:DD:82:71:8B:2A:3E:ED:F7:16:87:FC:28:67:F6:2E:36:E9:F5:33:7E:20:97:68:33:DB:49:58:9F"}}},"request":{"raw":"GET /music/photo_new/T053XD000004Ziflf4cbjjm.gif HTTP/1.1\r\nHost: wx.y.gtimg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Nov 2025 09:56:17 GMT\r\nServer: nws_static_mid\r\nDate: Fri, 07 Nov 2025 09:57:30 GMT\r\nExpires: Sun, 07 Dec 2025 09:57:30 GMT\r\nContent-Type: image/webp\r\nX-Verify-Code: cc2b25cf41cd8d19f2f86d8de16816e0\r\nX-Daa-Tunnel: hop_count=1\r\nCache-Control: max-age=2592000\r\nAge: 1027210\r\nContent-Length: 966284\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3987545910076515081\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept\r\nX-Webp-Req: accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":966284,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69296fea758dd4f3d170b3387564fe9a","sha1":"fa7567cd0d5bc187ae0b138e442b23f12a0d1952","sha256":"ea2925e29bba2e6ab60cbe4a879c06947e664b2a6252e8e28260f0752e3b69da","sha512":"d8736ca5cec81afa4b83f7a176d203c57e4394a5d2c6490477e06aabb850768abe0bce95a68fab723f938c9f4db9f62b6b77d1a78a11c9f035a27a540be580fd","ssdeep":"24576:W6Zj5+dgl4DBDik2ftKNzyRc5fpiGiiNv/G/DtMZ7:lKdgl4VKYNiof3iiA47","tlshash":"b22533fb824e8c6cd345527a98863e140f0a5a1b9673f90b4bddf5a3e31744db0ab0b5","first_seen":"2025-10-06T04:10:05.725529Z","last_seen":"2025-12-26T10:51:46.71657Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6940,"timings":{"blocked":2186,"dns":1373,"connect":259,"send":0,"wait":262,"receive":2264,"ssl":593},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/static/image/common/adiden.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:15:48 GMT","end":"Sat, 24 Jan 2026 01:15:47 GMT"},"fingerprint":{"sha1":"4B:E5:D2:ED:ED:94:F9:0F:C3:16:6D:7A:1E:39:DB:11:77:9B:A7:7C","sha256":"1E:8A:DA:99:C9:72:7D:1C:48:82:92:D7:41:FF:FC:D8:21:DD:AC:9D:28:5B:07:8F:B5:B2:5F:EA:34:1C:5C:0A"}}},"request":{"raw":"GET /static/image/common/adiden.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 164\r\nlast-modified: Thu, 05 Aug 2021 14:55:17 GMT\r\netag: \"610bfbd5-a4\"\r\nexpires: Fri, 19 Dec 2025 07:17:40 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=4cea8a34da8d272ddafdcd475e0eeb4c; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=0e8e25637e88d518313942f8c7e72b04; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 14, 1-bit colormap, non-interlaced","md5":"33ed1424748b05991e59fe63ac6aaf6b","sha1":"4e152136e2d9f40555f4920bd13e8f385ce0e9af","sha256":"42a839e3377fd05bae77d8f5fa1a7a04c4884f4087a49ddf00e81c96b3160d9d","sha512":"437142cdad77bc1f18196334509bb211117c07c91e0d5c746158108498e30fb39f2aba2ae3192cce6e9ac4c04e8f2e2b45041850024d4bc4349e679aa88ca300","ssdeep":"","tlshash":"e5c08ce2e2489ca9c1af99b2918fc50ddb728a03623748836c0e99392679250a3c4392","first_seen":"2023-05-22T12:07:21Z","last_seen":"2026-02-07T12:55:00.033421Z","times_seen":28,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":1,"connect":159,"send":0,"wait":246,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/cache/logging.js?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/cache/logging.js?S3F HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 390\r\nlast-modified: Tue, 18 Nov 2025 21:30:00 GMT\r\netag: \"691ce558-186\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (390), with no line terminators","md5":"4544d50d2dde9cccea8012a9a5d0cfb7","sha1":"db2e168b35fb57db8002e3223effcc50a705ed30","sha256":"843ca4ccc43f7c97d0f24897b2890a713355e0e5e89f6a96001e663e10282b45","sha512":"6b99c931cee98a38e2d2fd44091b46266027ff407acab2f4255b66d3f66fca96cc05c45f9160864f0c83fda36224b44ad2ff5f678a7e29cf8d400453afc30c62","ssdeep":"","tlshash":"39e0ab8a336b052a0a9231e000c3cb567b38ae108012a80ca4063e812f39d52e8b7730","first_seen":"2023-03-07T13:20:42Z","last_seen":"2026-04-05T12:32:53.046817Z","times_seen":336,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T059M000003fQDRG4VapHR.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T059M000003fQDRG4VapHR.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 12:06:52 GMT\r\nserver: NWS_SSD_MID\r\ndate: Sat, 27 Sep 2025 11:34:08 GMT\r\nexpires: Tue, 30 Sep 2025 11:34:08 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 21316f505d2a9d15507f235aea231030\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 223309\r\ncontent-length: 14718\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17882134896614158261\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"984bed9fd887f79c10e5c7f9245c3a61","sha1":"686545e9d30dd4b4349b8d7c3437b4534d98550f","sha256":"6c419307c0066c584f9ec9e1953c9c48863d5f8a5ad7975289e2f43bed6a7044","sha512":"1039a7e70a654b9735f01c4f8c442c62ad6a960abc5265259d9aa92e301934dc6dba3fc8d661fad4e0040ca0835d3a250cbaeeea0806c605f318d330833017e2","ssdeep":"384:eDTC/+Q37mBCtQFNjcVHn2GZycMtldSo9BKX6LaCz:eDQ+QLMCtOyHn29c++o9/aS","tlshash":"0662c1216bf76840a42b04a4ed278e68ebfa136eb7c07ddd7e2c5105c875f043419ce0","first_seen":"2025-06-21T22:36:42.933386Z","last_seen":"2026-01-04T02:54:45.139191Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7113,"timings":{"blocked":3002,"dns":1912,"connect":264,"send":0,"wait":1053,"receive":21,"ssl":857},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T059M000001FbQJQ3vHXjw.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T059M000001FbQJQ3vHXjw.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 11:45:54 GMT\r\nserver: NWS_SSD_MID\r\ndate: Sat, 27 Sep 2025 11:18:54 GMT\r\nexpires: Tue, 30 Sep 2025 11:18:54 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 8d3db4bef2f43ae71f382044c69e3655\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 223309\r\ncontent-length: 61504\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17915875875904922969\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07fefcdbb0c20b2a003dfcbbb0d3a6e4","sha1":"5283f717597aebcc8aec5913afb82fb95e93d9d8","sha256":"5f24e0046a65254712d690d3a864e4f1958f1311c526352844a093882b0232c5","sha512":"6eb2551e70d90a705a268ddb572efbc6c690738ab5e67b5660d6570469712004071a4d0d9a2e10ae0d9313c377c0413c52b9f71b78d353238cfdbd9e6c5622e5","ssdeep":"1536:d90eTjiC4s6my0KwNAo+dLmPkEL/95U/WTaX5:j0eb4s6wKwNAPMPkE7YTp","tlshash":"79530213f9584c6af63579ae21ba7a478d8d4d85d2aa0501020cf9e3cfde520bf453ee","first_seen":"2025-10-06T04:10:05.727564Z","last_seen":"2025-11-19T07:18:32.314555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6148,"timings":{"blocked":2647,"dns":1922,"connect":249,"send":0,"wait":571,"receive":242,"ssl":513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/static/image/common/px.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:15:48 GMT","end":"Sat, 24 Jan 2026 01:15:47 GMT"},"fingerprint":{"sha1":"4B:E5:D2:ED:ED:94:F9:0F:C3:16:6D:7A:1E:39:DB:11:77:9B:A7:7C","sha256":"1E:8A:DA:99:C9:72:7D:1C:48:82:92:D7:41:FF:FC:D8:21:DD:AC:9D:28:5B:07:8F:B5:B2:5F:EA:34:1C:5C:0A"}}},"request":{"raw":"GET /static/image/common/px.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 210\r\nlast-modified: Mon, 15 May 2023 03:43:20 GMT\r\netag: \"6461aa58-d2\"\r\nexpires: Fri, 19 Dec 2025 07:17:40 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=4cea8a34da8d272ddafdcd475e0eeb4c; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=2b8fb3478eeb7fc0e16728367f6394ed; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 1, 1-bit colormap, non-interlaced","md5":"1120da8344d0a52265635f08820867f4","sha1":"964f9165b23b866cce7dc930566160615b05bbe5","sha256":"e11970020edea5be0994cf33d189346011dc92c901e946303ba6422b028bc231","sha512":"bd32df3ef75cc8df46064c0946b4eaeddaaf06a040d1a69afc3dae83de3642103675f8a9b80e326e7e711880a3f93e96e8bf3f2ec0b8ee83612e37b513e67fff","ssdeep":"","tlshash":"11d022c1a7a88c9ba67aa793c1c20091f51b138281055d1a4c88c5201aa98d8e7a4637","first_seen":"2023-05-04T01:00:46Z","last_seen":"2026-04-02T08:22:15.528092Z","times_seen":468,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":55,"dns":22,"connect":162,"send":0,"wait":161,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img02.sogoucdn.com/app/a/200692/1920_644_feedback_429e5f63cace4bd184565dd1b077ea4a.png","fqdn":"img02.sogoucdn.com","domain":"sogoucdn.com","tld":"com"},"ip":{"addr":"43.152.180.110","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sogou.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 20 May 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"34:BC:52:B5:0C:78:D8:86:70:2C:C5:F1:AF:00:4D:9F:C3:04:05:71","sha256":"58:07:E1:1D:A7:02:A6:8E:56:2B:EB:79:02:F5:85:E9:F2:C3:54:4D:57:C6:4F:1A:C5:3E:03:D2:4A:85:2B:F2"}}},"request":{"raw":"GET /app/a/200692/1920_644_feedback_429e5f63cace4bd184565dd1b077ea4a.png HTTP/1.1\r\nHost: img02.sogoucdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:41 GMT\r\ncontent-type: text/html\r\nx-yuntu-trace-proxy: 310637b586bb\r\nx-cache-lookup: Cache Miss, Hit From Inner Cluster, Cache Miss, Cache Miss\r\ncontent-length: 153\r\nx-nws-log-uuid: 15370144071031506721\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T16:47:07.54892Z","times_seen":13384334,"resource_available":true,"data":null}},"time_used":1954,"timings":{"blocked":67,"dns":336,"connect":158,"send":0,"wait":434,"receive":0,"ssl":959},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-19T07:17:38.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: JWUN_2132_saltkey=hs9Cc4s1; expires=Fri, 19-Dec-2025 07:17:39 GMT; Max-Age=2592000; path=/; secure; httponly\nJWUN_2132_lastvisit=1763533059; expires=Fri, 19-Dec-2025 07:17:39 GMT; Max-Age=2592000; path=/; secure\nJWUN_2132_sid=rtiUPp; expires=Thu, 20-Nov-2025 07:17:39 GMT; Max-Age=86400; path=/; secure\nJWUN_2132_lastact=1763536659%09index.php%09; expires=Thu, 20-Nov-2025 07:17:39 GMT; Max-Age=86400; path=/; secure\nJWUN_2132_pc_size_c=0; expires=Thu, 20-Nov-2025 07:17:39 GMT; Max-Age=86400; path=/; secure\nJWUN_2132_sid=rtiUPp; expires=Thu, 20-Nov-2025 07:17:39 GMT; Max-Age=86400; path=/; secure\nserver_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Discuz! X:3.4","description":"Discuz! X is an internet forum software written in PHP and supports MySQL and PostgreSQL databases.","website":"https://www.discuz.net","common_platform_enumeration":"","icon":"Discuz X.png","categories":["Message boards"]}],"data":{"size":29946,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1373), with CRLF, LF line terminators","md5":"6f6971d4bb738a42774c932d9f36a295","sha1":"881a698dc98471264ffac2e0a8f58c64f4514ed3","sha256":"03acc479656e1835da2573a97112f27507ec22fc2295c62d764c30bcfefcbea3","sha512":"40a6c074e6c8b6229756a097b85c79fd4e80777767098c231d3eef1d4080873773771caf2b3a405e665d65a150e30d08d798bcf5e69f2ad0caf0e3868be495b7","ssdeep":"384:SIJsEKJNs+qxUtSSyd3NXeGkwFL9oGYnLxCCVAEDtj/RV1R8N7/hTGtDoMxeifrR:SfEWNnqxmgd3NXrp9uhDdr1RFhGu","tlshash":"56d2a522d9db8c2b4733c1e0d8b2ab1cf0920257d7128e15b5ec1a93bfa5f659c5309e","first_seen":"2025-11-19T07:18:32.317373Z","last_seen":"2025-11-19T07:18:32.317373Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2155,"timings":{"blocked":921,"dns":597,"connect":156,"send":0,"wait":312,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T059M000001E3ocX0yTUmW.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T059M000001E3ocX0yTUmW.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 11:25:36 GMT\r\nserver: NWS_SSD_MID\r\ndate: Sat, 27 Sep 2025 10:30:56 GMT\r\nexpires: Tue, 30 Sep 2025 10:30:56 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 48c6576054e405230de0f5d0ee5e8119\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 246325\r\ncontent-length: 112650\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1198253032170492178\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"674cfc40ce4a2ce10548e542ce6e72af","sha1":"6a8ebf952988d1e7d9ef7ea3c1e49757e984da6c","sha256":"7e027822fb25f976a32e4e1c1de0a5454bde30ffa3aa8cc270f5d99e66266bb1","sha512":"de476e2f064146320fff09c1fb8b24491d70c85d3b58cf7c3fc71158f12cb924e219d157762ddc98cd633c06293fad631f57d1fdbb839e1e5a308d36bad78f10","ssdeep":"1536:V23Ex14T0LvIOTEJpnR8OrbeGiR08bxQvpeEl+BpuTfkBYI6JvY/LB:83EpbIyEJpnR84ed1QROuYy4B","tlshash":"c8b31231030a6e90dc464a71326377f44b64e1e5e60b1c7b5e55bc3d2bbaf4a88b2b35","first_seen":"2025-10-06T04:10:05.659095Z","last_seen":"2025-12-24T19:36:01.841283Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3241,"timings":{"blocked":-1,"dns":1903,"connect":262,"send":0,"wait":267,"receive":402,"ssl":406},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/home.php?mod=misc\u0026ac=sendmail\u0026rand=1763536659","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /home.php?mod=misc\u0026ac=sendmail\u0026rand=1763536659 HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: JWUN_2132_lastact=1763536659%09home.php%09misc; expires=Thu, 20-Nov-2025 07:17:39 GMT; Max-Age=86400; path=/; secure\nJWUN_2132_sendmail=1; expires=Wed, 19-Nov-2025 07:22:39 GMT; Max-Age=300; path=/; secure\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T16:47:07.54892Z","times_seen":13384334,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.layuicdn.com/layui/layui.js","fqdn":"www.layuicdn.com","domain":"layuicdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.364Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /layui/layui.js HTTP/1.1\r\nHost: www.layuicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T16:47:07.54892Z","times_seen":13384334,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/template/ooojps_jian1203/images/chart.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:40.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:15:48 GMT","end":"Sat, 24 Jan 2026 01:15:47 GMT"},"fingerprint":{"sha1":"4B:E5:D2:ED:ED:94:F9:0F:C3:16:6D:7A:1E:39:DB:11:77:9B:A7:7C","sha256":"1E:8A:DA:99:C9:72:7D:1C:48:82:92:D7:41:FF:FC:D8:21:DD:AC:9D:28:5B:07:8F:B5:B2:5F:EA:34:1C:5C:0A"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/chart.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 990\r\nlast-modified: Wed, 13 Jan 2021 03:33:01 GMT\r\netag: \"5ffe69ed-3de\"\r\nexpires: Fri, 19 Dec 2025 07:17:40 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=4cea8a34da8d272ddafdcd475e0eeb4c; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=eb2c3ae27f3684bf90d030cb228f53db; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"3046ca1c2d74c72b752711e737c1a965","sha1":"44856101b21db49e188fecef03f8e91c7e0bdc61","sha256":"b2018d88f01016ba37924a4a7df4c39399ff28109dd65acd195b8b263cb65720","sha512":"2b5296aefa15fec56ad3b2b7637fd173f43c311192b64551da147d5d5546cd0255294997d7001511d8b999dcbc5f39f7e023d99a12183a47e8cbc35077056fe0","ssdeep":"","tlshash":"70110e88fe806c4091cad5d228e2c03b945608809dd0f8b27ccad91308a43f99d8decf","first_seen":"2023-05-09T22:45:43Z","last_seen":"2026-03-31T06:34:26.108536Z","times_seen":115,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/data/cache/style_64_common.css?S3F","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /data/cache/style_64_common.css?S3F HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Nov 2025 07:08:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690af7e4-14794\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83860,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"df8e4fd8840b6f97fdbfddd73017def9","sha1":"c2de9cb6a28a9369540677cb368f06dfcbaa25e7","sha256":"c02fac8d8618b973d1a820e23063b75318f70a51027e02c493d789fe47cd57c8","sha512":"21b4e8588fa7b2e77a7fb5c9b653ea11a203e30e0e66dac60d29bcafcc676a960874f453e3fb89f56feccc472fa7c112dbfdff186a6045b519796f17e66d25e1","ssdeep":"1536:DfwxX2sCHyX6xtF2/5wFMkMpsECZdo8Z6//jQmMYYmrZ:/sKimHWD","tlshash":"2a83a5229ad1201eb53bca76f462e7ddb117c05be3530bf9f5293cb4c80789519327aa","first_seen":"2025-11-19T07:18:32.322954Z","last_seen":"2025-11-19T07:18:32.322954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.org/source/plugin/geetest3/js/gt.js","fqdn":"www.kxdao.org","domain":"kxdao.org","tld":"org"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.org/","date":"2025-11-19T07:17:39.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 01:16:05 GMT","end":"Sat, 24 Jan 2026 01:16:04 GMT"},"fingerprint":{"sha1":"71:D8:A9:5F:47:E5:F5:EA:C8:33:AB:E7:56:EA:95:67:DE:D6:ED:AE","sha256":"5A:76:17:51:6D:68:C5:37:BE:58:30:C1:F0:F5:86:90:0A:4A:13:BC:AF:F7:BE:ED:C1:BC:15:3E:9F:2A:D4:7F"}}},"request":{"raw":"GET /source/plugin/geetest3/js/gt.js HTTP/1.1\r\nHost: www.kxdao.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.org/\r\nCookie: JWUN_2132_saltkey=hs9Cc4s1; JWUN_2132_lastvisit=1763533059; JWUN_2132_sid=rtiUPp; JWUN_2132_lastact=1763536659%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=a0ba97c42e9f478b1d878a40c3cb30a4; SITE_TOTAL_ID=71a38f760efeb6e92c1635ba6cdefb4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 19 Nov 2025 07:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Oct 2021 01:13:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6178a7a8-22db\"\r\nexpires: Wed, 19 Nov 2025 19:17:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"87d1e58e54fb76b16b649cd025f63a3b","sha1":"57a53b2ffdd41ed3609964069bc6b93003648006","sha256":"add1840190041b98d2c3facdfc43ac873a2e7c759fe62034e5d984172acee5bb","sha512":"ff8d949e7df9053affde1194d5920c5b4128ba9cb81f899901c5b8d9d70dd23b64e2f38fac150905b589e6fd50beeb4126419e7cbc33bb698a683cc30d660ff0","ssdeep":"192:2eoSgR4CxE+jIvbk7ANr2oIGymkw7tTu7qBynHTABH9VMUxF6dK3wrlSLgwy7KCo:2eQ/reTQCynsBdVkKgrWQZo","tlshash":"9d02de1ea8f754938967b8798b6fa214f9398553041cce023e8cf3549f644385baafdc","first_seen":"2023-03-07T12:06:16Z","last_seen":"2026-03-08T21:57:16.299877Z","times_seen":30,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}