{"report_id":"3cb2ccd0-1adb-452f-a779-489d75835f9c","version":0,"status":"done","tags":[],"date":"2026-10-14T20:06:29Z","url":{"schema":"http","addr":"gtcefx.com/","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"172.67.198.166","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gtcefx.com/pc/#/home/index","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"title":"GTCFX - Massive selection of products","dom":{"size":36401,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33487)","md5":"58f27a36bd8b30c434480cbd543aa1a5","sha1":"00b4c410f15152f336c6e83df59881cefa5f6799","sha256":"ac3b17d7fa61742613e4d138239f133315fbd1acda7a87754ed8c3a70da3f9f6","sha512":"f6921829025c7b3269d2de23a5a3bc28451853a4fe52d7d726780b89ff6ee99c5747828a85236a6aac13a691e5028d4d9bc3092b478d54603570f5e72316e54e","ssdeep":"384:J76EKDECznF9KDay/fDBT2aRaSdHVaEGfNdgaEzfndgdedHxZafqLo:l62+nLGDBT2aRaYjLo","tlshash":"1cf2ac70a40418e749a384cce172bf8971a2e39fc149cc856afe918aefd3c71bd506b5","dom_hash":"domhash66c6455b936dbad65a58b7176b507929","first_seen":"2026-10-14T20:07:41.457377Z","last_seen":"2026-10-14T20:07:41.457377Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gtcefx.com/","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"172.67.198.166","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-18T20:06:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webapi.gtcfxmq.com","ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":52,"received_data":129324,"sent_data":31253,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.251","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-31T04:07:26.192616Z","last_seen":"2026-10-04T03:53:33.375133Z","alert_count":0,"request_count":3,"received_data":11991417,"sent_data":1790,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"gtcefx.com","ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":40,"received_data":31251064,"sent_data":20663,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.0.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]}]},{"fqdn":"kk.zetagl0bal.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-12","domain_rank":0,"first_seen":"2025-08-04T13:33:35.916282Z","last_seen":"2026-06-29T15:14:29.200544Z","alert_count":11,"request_count":11,"received_data":0,"sent_data":6457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tetmksells.com","ip":{"addr":"8.210.242.77","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-05-04","domain_rank":0,"first_seen":"2026-06-29T15:14:28.407126Z","last_seen":"2026-06-29T15:14:28.407126Z","alert_count":0,"request_count":2,"received_data":176535,"sent_data":1169,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/element-ui/2.15.6/index.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"693f98461ce3fa58cbe5ac24d9a21b1e","sha1":"93661cc05514da433809e79f229815ae1ddbee77","sha256":"24ebdea828e938d3a45128b41979b320b4cbd40c8c0d4bad6a9cd9bc3bfa4e0c","sha512":"2dab95b96bfccc9f78069504b006adc198531831c53c81b23b8d05163428f0a66beefe7d466452e7142cbe98419e36d327b20ab24dd3c25a05de9f9363e05d3e","ssdeep":"6144:B4lry61ETrc+kymEidUVM+u0kXzVXsnDBH7SuLH8isMZgS7Lu5:2U61Wrc+kymEiuVM+k9uVHOuD7Lu5","tlshash":"d3c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","size":586253,"data":"","first_seen":"2023-03-07T13:53:00Z","last_seen":"2026-10-14T21:36:25.19533Z","times_seen":633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/avue/2.9.5/avue.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"750459dc86246c289cdf5b760013f43b","sha1":"8103e042309fe4007cda921497f28410a75656ba","sha256":"5df0b88dacc1f9ae9edc0adc120da6190632e03cea789186cfc49d532918d6bf","sha512":"f9db639a43a21ca3a54d2546999e885bc0057f1b29eb9c2a1b7e5510dfd284530992a97c9642d4ed87357a472b7274b229279fdd45251ad9bc7c03564747375d","ssdeep":"3072:8mWzlkGK5sT4v9rD/2S4oqJNtvywiDjD7TefeKceKsT1/tF8vUoa:8mXqJNtvywiD37TefeKceKsT1/XBoa","tlshash":"50540959f1cab8750ad76070003f210af2372b896409d0a4b679d9e1adbce4da16ff7d","size":300353,"data":"","first_seen":"2025-03-06T09:16:43.423938Z","last_seen":"2026-10-14T20:33:03.151902Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3015993abb02d6841fe7b2050de42786","sha1":"e75df9bc4ae53e97623a63dc5256653a20c9df28","sha256":"b85e960cb2ccff0d94c04b473937195dcbf721819a1fd203799cd369d2a9b7e3","sha512":"f674fe788853fa843808e866262e01d826d7ec4ef2f242afbd6c5908c44079c861c7ed3979a988c28f0d6af860f2aeb7f3345c2f406c3ffe12ab8d71234300ba","ssdeep":"","tlshash":"c611001ac9874c2b48a624696b9db10431b640574d09f416ba5e8b8d0f2ce3f42f6fee","size":1008,"data":"","first_seen":"2026-06-29T15:14:36.397416Z","last_seen":"2026-10-14T20:33:03.402279Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/js/chunk-vendors.fec0ae75.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5427f53c4c726ef02871b0abcd2063c6","sha1":"cb3c376aa9de4aecd23ee5f0898cf6ca5e154692","sha256":"22f29c083034b728791d7cb233b241bb46f9269a55ce9280c39cdb6ca673c4a2","sha512":"0d35e6bb7163e6b0c05cc484ddcf21dee398e650df5eeea9c3d6f9a5245a158eb24db916609a0567c1eafce58f956087cb7dbe4ec2fe0bf40f68fc03c624b398","ssdeep":"12288:z/y2jk/v6I+QmR/bFy2Qcr94WJqYRGEfx:by2jOIMO4fBG","tlshash":"b005e6cdf2d6b0a113e770a5003f650bf27a6858780e8595f265e8d5bc78a8e513bf38","size":837321,"data":"","first_seen":"2026-10-14T20:07:41.461438Z","last_seen":"2026-10-14T20:33:03.358429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/js/app.199b0cee.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6505661923a3e8123617e39fcb2c000","sha1":"19afdd45399d7e2c646c0dc19ec93d831a0f3210","sha256":"d1c90bcfed69b6e80884be611ebe840556e309e208a2ae357259a3bef0445418","sha512":"40715e853b397fb0e79d2717979d40eb0627a0a7afd88e50c314c504a49c7fa90cf9586d7c3773e953d0eae1127b36ed12c0f3d510757c1692dcc984aaff3615","ssdeep":"12288:Un50MNPOwhJjwkdgIEo3DyMCDJ0XJEZMb7dZf5BgBFDEEIcj6Ybs/X2zi6vHS7jd:W50qG7A/Gzi7jEwQ+","tlshash":"28e41777278bd8e721952380706ab6a5f16cb899f725e4d005f8c2dfe1e6907d803b27","size":695032,"data":"","first_seen":"2026-10-14T20:07:41.494836Z","last_seen":"2026-10-14T20:33:02.963389Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/charting_library/charting_library.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-10-14T20:34:30.886853Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/#/","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"338a9fac24d8e9eb7eca99e84b829fdb","sha1":"7a81d6a12ee875e2181818ac6d54ebff81848085","sha256":"9538e036ace74824a3fa7b843c7088dc541e0a6350325e3711ce96d34718b4a8","sha512":"6cadb556b277c643d0958d4116f6bf12a64f9afbf45c08c90203d43493310b784e94d293c6820d104fa0aced91d1c1ff7428b25b65a983d427a8f44ec41eb13d","ssdeep":"","tlshash":"8ac012e631a196042d7007395acd1e21f4114333884c460e78bc5c002f734001168c74","size":192,"data":"","first_seen":"2024-12-02T08:41:53.660962Z","last_seen":"2026-10-14T20:33:03.387658Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/js/views.8541ac7a.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e538a1578986990ce0d29a7ed3f470b","sha1":"d0af27441f11f430d138d4699ac8ff7c0633c781","sha256":"b73ca17f6c94849e76bd32dc8b36de833ac872ff70921ed1dbc992afc992576f","sha512":"75b6289b4f3f0ef289602b9cb012be95a07bdbbf436c3a2ee8b47b8da270164b66873d9ee62dcf35c149f8005fd02501d7f8650e1c5d8ab8ed611eea6ab8c42a","ssdeep":"12288:qYLz29OF7qVNfDXOnWBnR4amsV1AsWOJSdgU4l3hSSrpyALki1CeINrkYP/qJPo/:Lt4fDXgGR4tsWOJSdJ0rpVgaCH4qihIL","tlshash":"48e51a84b292b06ac69e6550042f410de379ba68740a806df735dce37de8e84762ff7d","size":3073120,"data":"","first_seen":"2026-10-14T20:07:41.552384Z","last_seen":"2026-10-14T20:33:03.378721Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/vue/2.6.10/vue.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-10-14T21:14:42.710745Z","times_seen":4860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/vuex/3.1.1/vuex.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccce53cbb3813a63f1420eba489574af","sha1":"94ac9c787b2b96236356286c44350260c9f08a33","sha256":"1610512a47faf745fe96ac631be8ea3ea50a222fe7d7cca691f7ff8194b934bc","sha512":"78a2cf9dd160d4a451c1536de4d0037330d8ed11d07f0edaa427de7131a190af3c86d1a3f5bd858cac14f16ca70f78b2dc4bbe0124f7d3a2a4cce8872b95b8bd","ssdeep":"192:ViDaQv4w9nWp4UvouC3Dqs/778IG0zqLVFcu8XCnrdVpVAQflmGcXg3H8VnbZqlp:VeJgqnWp4kYj78p16CrdKMQ0CbMB+a4+","tlshash":"6a32cb9a73e1762aca57b0b0ac5f9c08f275a9dc1686400c6a4dc0f99c754bccb7ed9c","size":11653,"data":"","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-10-14T20:33:03.182366Z","times_seen":344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/vue-router/3.0.1/vue-router.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7656f4be720b1580847f9783d6ab4dd","sha1":"d3582fc6fb317199378638d2a12b4186fdee19eb","sha256":"9d5542c396b2102deb7390b39061aa7ae35f9329dfab9a34823cf84396b8cc13","sha512":"e31c23718a86b6a46355b975f29854ad874351005a9c634a56cfe8f4126198be7d6ca67cd95ba24135ce8cceb3b6dd1b4eaa8f9d4aadfe4061210f4c7b8052b4","ssdeep":"384:Oxwp+JvwAmXRZOYQFoB5RKbKBpZn6ySH1DhUxjImhFVP:Fp+JvwAGjOYQFoB5RK+nnTMa/hXP","tlshash":"b0b2c69db582b03247d326a0816f150bf23b7999744e84a8f2a9f4d43cbd85e8427f7d","size":24555,"data":"","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-10-14T20:33:03.158571Z","times_seen":348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/axios/1.0.0/axios.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76235a7ee6b454034b80a390ccc92f37","sha1":"8a84e29a036660955f3ebc42d43bb522730b5707","sha256":"3c92bac09bac9bfd77f2ced65b63e009c9b67c109a9d37de637b3573d7ec7adb","sha512":"35c36d820651548001703c6458cfb922c55c12bd8c0ed73a8d095f0656e45c345e0f4fb2fe0e037d14009020dc38bed1e349d110b3f9f2f50dcfa0f05f8cbd08","ssdeep":"384:3ao8KGKMMT6nbNp0nkJFP5F0YS6DagzzNYT9eei:VGNp0EPb46DaT9e1","tlshash":"f242a7ce78a1b0d747f320f0905f5a0fb2b6992a644d84a0e560e8f66db546e8737f4c","size":12969,"data":"","first_seen":"2023-06-26T22:56:34Z","last_seen":"2026-10-14T20:33:03.163669Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getAllSetting","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.993Z","timestamp":1792008019993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:20 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2F9aIfW8lZh265a3IU%2BNukOUowdPiFev3DxNSpZ6M6ZMOvjOev%2F%2BgumQduK8T1atuaAwvfETe1ukdUMmNfqxaM0XIRu1ekOa7KH66A2FwnfsU30I7BcTKOUFKWsCthmhOOrG82Q%3D\"}]}\r\ncf-ray: a4a92b6cebe856b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.251","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:21.099Z","timestamp":1792008021099,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=11927552-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Wed, 14 Oct 2026 20:00:21 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 23167\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACFDF5557675838334A07A2\r\nContent-Range: bytes 11927552-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":23167,"size_decoded":23740,"mime_type":"video/mp4","magic":"data","md5":"4800ef247297f25d863add4a83165043","sha1":"d1579ce2e9b9780a79e6973377047e8b3ca15c72","sha256":"758467e2f317ac264884f382f7bec1c4bb33b6dd278a27d20cbe5ec03421a5a7","sha512":"bd4af4a4ff9a707360538e45e8ad8b34f0c9bc895d627b91331deab92c40cdb151a7bdf4f6963810de70e12ebf782125cbca4808ace8552fbfaf1747f12fbc7b","ssdeep":"384:2NsWV6+6L7womPOklR9XsJDC9uqAry3qnerq:OJV6t49Qdryhe","tlshash":"cea26a99f3754453da580bbd09fbc752b724e220375b4b4b53487b09fda8a94ae234c8","first_seen":"2024-12-31T04:07:32.409815Z","last_seen":"2026-10-14T20:33:03.007236Z","times_seen":22,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":174,"send":0,"wait":184,"receive":5,"ssl":362},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/js/chunk-vendors.fec0ae75.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.340Z","timestamp":1792008015340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/js/chunk-vendors.fec0ae75.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-cc6c9\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hs5dVMF5tlUTWpSsqLT7yKqPRoQTzwM%2BlvSuRyJf3UaPc3iLBD46IiTPnYHJcSf5mcYqnaFKLLgeoVHY76ACdxBFKtrvwQriHwnjZQZ7v%2Bs656xYKgl%2BFZ4wRXGU\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a4a92b4fd8c15693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":837321,"size_decoded":282054,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65449)","md5":"5427f53c4c726ef02871b0abcd2063c6","sha1":"cb3c376aa9de4aecd23ee5f0898cf6ca5e154692","sha256":"22f29c083034b728791d7cb233b241bb46f9269a55ce9280c39cdb6ca673c4a2","sha512":"0d35e6bb7163e6b0c05cc484ddcf21dee398e650df5eeea9c3d6f9a5245a158eb24db916609a0567c1eafce58f956087cb7dbe4ec2fe0bf40f68fc03c624b398","ssdeep":"12288:z/y2jk/v6I+QmR/bFy2Qcr94WJqYRGEfx:by2jOIMO4fBG","tlshash":"b005e6cdf2d6b0a113e770a5003f650bf27a6858780e8595f265e8d5bc78a8e513bf38","first_seen":"2026-10-14T20:07:41.461438Z","last_seen":"2026-10-14T20:33:03.358429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1116,"receive":643,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/css/app.04609613.css","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.335Z","timestamp":1792008015335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/css/app.04609613.css HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-2c48a\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzixFyOSwzIrXFyMRPyzIILpNXc3rf%2FwsAcavAgBlgEI0ZVAwes405ArPoHp1Y7bTS%2Bl9P8sR0MWOzT5g5dzdfmMJJ2%2FQTuyWqzksLRWBYTcFiDEa9eUMWn6tpVh\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a4a92b4fd8be5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181386,"size_decoded":25106,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1906ab2c8bbadc8170ba54e7ecc4f2f9","sha1":"df63d1824f9834903064bd96fb2628d4fdd9d143","sha256":"3f429ef95456064aafb23cd44a518730e20db6006abc2c1db257c38fb5150508","sha512":"06d63dfd6be0b30ad0430e2d5998681b355a880bf33eb4276a59d0a197d8b6eafb91b1264ede214be101a7e451ab4faaa36bbbec36f6de9607af39a9c56e376b","ssdeep":"1536:d9txuu8IktwIPzdPUWlmAIS0oX3gwbwKyrtayUz6J1jJvX:d1uu8Iktw8oRwbwKoAye6JtVX","tlshash":"25048321fb4b24e73287d24e6644b77a2b39b7b5d0011fb4f02e795e46c25872392b1e","first_seen":"2026-06-29T18:42:46.462542Z","last_seen":"2026-10-14T20:33:03.070168Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1175,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/css/views.bf7a539e.css","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:17.388Z","timestamp":1792008017388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/css/views.bf7a539e.css HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-df224\"\r\nexpires: Thu, 15 Oct 2026 08:00:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4b6GlCIhYc38ezh0DR6MYYXnNA0qidH%2F%2Fl1V99yrW%2BkbW%2FumDzGFKRGDuIhhv5h5JFSx%2FGJfzbFH0lLoSmamJoUPu8BFatbP46v%2Bc866esZ1ibHi9p64gM5Ops6\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a92b5caba45693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":913956,"size_decoded":94084,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bb7f159523a01de65958b72bcfdbdff6","sha1":"e576734ec5cd26f31acf40e807a042c944d829f3","sha256":"72a8b68fb1cc2575e1ba4c3ff8851b85b8aa1cd57139ffdfd28301d043a1d8d3","sha512":"331a00bce66534df9e4714561ccbb693076824ba152a5fec1db175d20ce7cc345db0dcc29ef1c743a9598f971a72955289b7440fa5c781d7c445b0b1a404df40","ssdeep":"12288:snbd8UbiI7dLeHK9wVYHKemLvU5MrkiweZB6zuZuXqRZiQuCm7ntb0AACoCRLmyr:snbd8UbiI7dLeHK9wVYHKemLvU5kh7i","tlshash":"5915d962736a262b70bbca1871d07f7a2918f673d10217f49a557929cbc3583332b71e","first_seen":"2026-10-14T20:07:41.467347Z","last_seen":"2026-10-14T20:33:03.139931Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1459,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1212,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:17.705Z","timestamp":1792008017705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:18 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4IokYHbIV3s%2Fc9dCXlhoeIA9tfEf75Z8Tz%2FlRx8%2Bz4Z%2BI3bJ4iqiBLhBuz9u5%2F7Vpetb2h85IFf4PXWP30ktP0sgnib555bFYR%2Btn1lCg%2BMV6Sx6e%2Fko1uwttOgX6BCJSXxGVk%3D\"}]}\r\ncf-ray: a4a92b5ecfa756b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":985,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":971,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":953,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:24.193Z","timestamp":1792008024193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:24 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwd8AcspA37IYGAt3N6vkKYl9%2B9vuaAB4ek3%2F4HSvlhYUvssjpepF5i0Hm7CSVMi45Ifwx%2Fet5sNeIQO9CTZ0Qr6zm27nEpK5Gc3Wft%2FgOOaWh5bEX9%2Fk0LQBIbr5PnDZ7vyTGM%3D\"}]}\r\ncf-ray: a4a92b873aca56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":979,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:26.203Z","timestamp":1792008026203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azyjxbfqofCMREhCr7dAzh3wSb4UNccKurdVUUE4HqU5DbNzvDvw2qbUYbrXl%2FDCKuzhehAS7iE52J299A841GnAgsR8l7XLCEpKiQ3Gwwo9z7PIzBVgxDo7FMYeMmXN8RN%2BbL8%3D\"}]}\r\ncf-ray: a4a92b93ce6956b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":973,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/12/22/827c8fe2e9564cde8a6ca6c11184139f.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.986Z","timestamp":1792008019986,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/12/22/827c8fe2e9564cde8a6ca6c11184139f.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/ltc.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.238Z","timestamp":1792008022238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/ltc.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-882a\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKPZpVoDHzWDx%2BuVAe%2BRtQHfe3vBwd78Kphfj7opn8PYgKEszB%2FfVctaxna%2FTZLG1f7fAfBfbB50NF7pjpoh7LFPxUzfbAxL4KOvnAmDmdpL%2BHfQUyC398xjNdI2\"}]}\r\npriority: u=5,i\r\ncf-ray: a4a92b7b0c525693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34858,"size_decoded":35493,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-10-14T20:33:03.185076Z","times_seen":6747,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1160,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:32.245Z","timestamp":1792008032245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:32 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfM1oqS7ZC8A2T76uESQmj4a5Qhej%2BaMaGknPsxOk%2BJLrUcxblX9ZGk34ec0zv5JLx%2FYzkAk7tQ0UkRve87snRsUrTk7m922TOXTYCgOEyI4f9skYlk6w8C9KAE3bEtSo%2BBFhjY%3D\"}]}\r\ncf-ray: a4a92bb98a2856b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/gbpjpy.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.307Z","timestamp":1792008022307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/gbpjpy.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-1348\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mY9QrwIAs%2Fs1w9VT7eVNVKIzRugdymOGbfotRov5OWrzZ9UVKlTg4ZCj%2FV6lx1qj2hzX8zWdxuwYbwoiDytt%2BA%2BJVydNeLkxR3bENO3JX5KsQf0nP4MbeIhXzbuz\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b6c675693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4936,"size_decoded":5736,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"8d8a21e0d7915c8096282decfc197a36","sha1":"9b82491101cbfa3b92768f08c73de0f7a8f07847","sha256":"3ecf56565ba9bcc5874cc67c416a0a870ea56819dd1eb5d65d6c704707713dec","sha512":"911605a1654252ca5693e234d7eb6fa5ce8be02da9c8022e9c000000ef2cd6c782ae400b5c09ce976ae7b92b0d881a07a51456c051f932ec3d88ea507a75281a","ssdeep":"96:Q0Gk2o26fDPpoEnzUdN21BroJPVfBOlBTdvhTqJFqshJFFfTzy8R:QVkjP9wa1BoZBWZhTY0i7fTjR","tlshash":"46a17e7285c6dfb1062fa89753d314b882fe42a205052ca834c5f08865ff514d8fb839","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-10-14T20:33:03.101259Z","times_seen":26,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":914,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/16/91ac88b70f7d4094be0a7a79126a96aa.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.984Z","timestamp":1792008019984,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/06/16/91ac88b70f7d4094be0a7a79126a96aa.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/fonts/DINOT-Regular.d5ae250f.ttf","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:16.602Z","timestamp":1792008016602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/fonts/DINOT-Regular.d5ae250f.ttf HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/css/app.04609613.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:17 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\netag: \"6acd4841-bceb8c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cU4jx0bUkXkHvmJxpCIIl0tD%2F%2FWN8T3kanOLy0y4bm%2B%2F1BYErE7iKa3VnoUDt6vAUL1Empc1NuvwLKLrHkUZBOnyc%2FX6M%2B5uFHwO6%2BJuSmAnTG8la0yG9E06kpvf\"}]}\r\ncf-ray: a4a92b57ba945693-OSL\r\ncontent-length: 12381068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12381068,"size_decoded":12381823,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-10-14T20:33:03.165736Z","times_seen":132,"resource_available":false,"data":null}},"time_used":3728,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":875,"receive":2853,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.gtcfxmq.com/ws/92f29397-6f1f-4651-9629-492e9926103e","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:17.691Z","timestamp":1792008017691,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"GET /ws/92f29397-6f1f-4651-9629-492e9926103e HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gtcefx.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5aESGs3Dy3+EknYGoh/ayQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 14 Oct 2026 20:00:18 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gtcefx.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: mYarsr0MzfJ+tnb6dxXCCcLjpPU=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dD2i6%2Bdk%2BSJzvKP9zcXlgJcJi0uyLeiTb5%2BMX99MJzxQZh1FfRunUr9d%2B10CeWV8m3x3NbcRY%2BQdtJ28lqlI6u6YjsBOjVEKIWk1%2BXvV7Uvdh3PXA%2B9ypWdfWA6Hx1ZynDIUnv8%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a4a92b5eeaaf56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":885,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":971,"timings":{"blocked":-1,"dns":30,"connect":32,"send":0,"wait":884,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/favicon.ico","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:18.302Z","timestamp":1792008018302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/favicon.ico HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:19 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: W/\"6acd4841-70076\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jz2K2GI3jllUyiXbDtulxDsxIoq7mRWHk%2Bcu7m8b%2FHLy%2FiQHYt9LCioen%2FogF%2FXFqZxvIXErZIAEV%2FpVMr3%2BWSBI7EFKAWyhsD58AkzuzV6m0cuT2EDsRWr5GEjg\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4a92b626ce35693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458870,"size_decoded":41913,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 10 icons, 256x256, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"c9b19288724cff2b153eee0e59668b7a","sha1":"68c3be372a3d1cf4ed92638cd056096126386cc8","sha256":"3c0e28043de6b313e46169d72af1bd23425bb43b33a8280f57e2e89a50728f73","sha512":"8b351a912c2a7e35b74a78478f1d6bb602603bb38d2164b72144c8aaac9225505fea1d7ae685d342acb3d4bf541ae56cff810f33cebbb52f5c5d5ae16d1ac3fa","ssdeep":"1536:K7spS5u3LqjyY9guqxz6GsgxTZWXdbIF15vNKRyLHSHLkT6C0kaZgjTV/:7btjxzVPl+CrV/","tlshash":"81a4fcd2b8c2d559ec292f34a835cdea002bbea5bc75f94a7d84739f57732c29021523","first_seen":"2026-02-24T16:01:19.499299Z","last_seen":"2026-10-14T20:33:03.065881Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2421,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":897,"receive":1524,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:39.336Z","timestamp":1792008039336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:39 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oz5vYv7rKM%2Fnm1gtJybQVk3ibsyzT91QKGQibkmCRVgNmWkaX9Lt4sigc%2BTD4ED%2BYZhED4of2VPYFW%2BeM%2B35E8qJPwW61U7I3ysEywbHtRE1daV7nx8y%2FJQrtBC%2BPNflez9qyNY%3D\"}]}\r\ncf-ray: a4a92be5dbf356b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":983,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/xau.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.223Z","timestamp":1792008022223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/xau.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-1639\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJ%2BYMnDIgvJh8PpnSrN7wMedygJ6uiVqR3BZJDj91yEWzmtBafpBi%2F2SLERYSLjVv%2Fx8lcJPXZwFWmzOWWttbLLjyIOKnOOcukTNJuTOKXbYXuwG%2F1zfNUMVnv2w\"}]}\r\npriority: u=5,i\r\ncf-ray: a4a92b7aec4a5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":6231,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components 3","md5":"78023b21da9ce237163e08caa29fe872","sha1":"876edfd939d4a973b444d8a4d4335ab2dcc19928","sha256":"3644e5a3a2696cf6c4e85fb4d04428c7eb4bd20487f2a4b8d42fc76738da321e","sha512":"c0fb8b947f769cb26667778e55cba17741810454b58c8d58e934d1be23eab2fc875d522f5a04cce3458ba3220b7839cec2e867f6091fbf57062744f0d816aa6c","ssdeep":"96:IhO6EVCrEvXz44/K6jtNV50OsEw5aGS2zQODMR6tybJoyOsCw1uwDUx+IeNXRcEz:IhO6E9z4eK6jtNzwgGVQA8KxmMN92XWq","tlshash":"78c17e2b6b4d6811dcb914b481e0f15dd6077f75a29b2c0dadb22894b1d4deb0c30b8d","first_seen":"2025-08-27T06:41:40.796854Z","last_seen":"2026-10-14T20:33:03.373775Z","times_seen":46,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":893,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/audjpy.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.305Z","timestamp":1792008022305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/audjpy.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-149f\"\r\nexpires: Fri, 13 Nov 2026 20:00:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUiYVjtlz%2B6Yw0rU9auFm%2FiVUm8RN6ZE1lBNResjmFNPQ%2BIoyp6%2F6dLol%2Fi%2FPOygMZBz73af0JyFMyYyUjjlZ6XFKB8s3lP8dg1uhLeNRb60tpHJa6pxXMez1Cv0\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b6c645693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5279,"size_decoded":6083,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"5c6928709eca3eea7b6c98bdf15c2aa7","sha1":"3c925ab9fd8d67d85a5b06ac3ffb1f082d11ff0d","sha256":"0e32faee1c0c8b2825923a8e3d7f40b16be2c675b6edd491c2464d4cf1028128","sha512":"014c076cc4abea82d89b6fbc51c47d6c86e26407083fe40caff5b8d22258d33c8bb76b1d79ccc2527c67404939fd02dbbbe2f9968ba94fa9642fa8e78cf87767","ssdeep":"96:7UluL95T84lq2ZQXnX+3GEAztHYyZ91ZvTIL0Qy1bE:78uh5TSX+3Qh7ZvHQ+I","tlshash":"83b18d891d0a6eb0ffe7b70eb2b06083b1434d9102d1aaab60d135b7aabc9105a551e3","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-10-14T20:33:03.069017Z","times_seen":31,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE\u0026status=0\u0026pageSize=1\u0026pageNum=1","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.995Z","timestamp":1792008019995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE\u0026status=0\u0026pageSize=1\u0026pageNum=1 HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:20 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XOUXQwUQ1ySSQfeJ7KWDwUf63ZaxCCZLvjMwGFOmNvdxCGNwo1h74GivsM1gTRAyxnvtr4mp4HW11l67eFkPnCUeZcs5wPaqI%2BiIt0jmJm9TbhWk73M2J78wBn3fS8X5DdkMprc%3D\"}]}\r\ncf-ray: a4a92b6cfbed56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":971,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:36.280Z","timestamp":1792008036280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:36 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQoTxufTbAZZxrfNayk2ARPpkmH0LFlB4cpvvCwD6fH7NrQFtyl7Ro%2BRLik%2FRQ7wYGV805wTFZBYu7q2MJu2EjjTW3FfKHoxlA5v8FBRLzPsYtdmKiFywjpSa5g1%2Fv8FlMNQn7Q%3D\"}]}\r\ncf-ray: a4a92bd2bfa956b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":975,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:40.324Z","timestamp":1792008040324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:40 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKLOXtN00BtQYZQT%2BUojgbMC%2BqUKfDUtyRg1ZY%2BW%2B2aO5ww1rzkmaqiuB7KTD93pUxDNVknKVhaSsfOBnJURMUOooXtIhdR6XgvBX04fa1sager5N0hotx0c7EUa7ZpFd0PwiFs%3D\"}]}\r\ncf-ray: a4a92bec0d1556b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/9e6ec6d5b9f349239a7195dc51983194.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.977Z","timestamp":1792008019977,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/9e6ec6d5b9f349239a7195dc51983194.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/sol.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.255Z","timestamp":1792008022255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/sol.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-6431\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyMkvPUXSmWILI%2FHtQ%2FbBN6uAK2yuBvgJuNraAwX%2BLsr%2FxhbmsCtH7oZAlaw8EcWhex8ThLwS%2F60d3KI8Wu5ebYxAh8l7HGFzidjrLGmlCcHKX5HIF4r123mIw83\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b1c555693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25649,"size_decoded":26263,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-10-14T20:33:03.216096Z","times_seen":6790,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/gbpusd.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.299Z","timestamp":1792008022299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/gbpusd.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-113a\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Bsxq%2FlKTYQj7%2F2OP4EbEiS7W6jwYAZQfpPqufN91bUaBN8t%2BAiKcRIAj4bn0BYlJWjuhTbWC%2Fs6LHVBRzrZWdl6g0LXWrvZzWhmHOeiRaDGiBcFK2gaklFqrAMM\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b5c615693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4410,"size_decoded":5205,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"08cc62173becd89c4fb8869bf74a44f5","sha1":"19012b5b4fb20cdc0b5e6264c02ead82665a7c48","sha256":"9d2c8d3fd13ea6183703ee47138efb4e7eee2674b86ea9a4547d28039010dcc2","sha512":"d4a1b1c9d3e687098a39d1738d14d48533f391ef86354f7fbb246ffa90145bbc3df3c3240c5eb4a5a122e424dfe65be34625b2de2a9dbcf9cbe21e661777efc9","ssdeep":"96:jPz8Q1ZoWYUucPXceioggaLqDDXka+85b2bQGmhR7Mq7tdYWXIy:jpZoWdB/hggKq8a8QGmhR7htdYWXD","tlshash":"f4917e9b53348115bd0bd621070730b687a6b98b95d93a36fb8f1dfc352581395ec610","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-10-14T20:33:03.317055Z","times_seen":33,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:28.211Z","timestamp":1792008028211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:28 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FoC%2FJdJSvYYOwYGFETlynqzclujwuG1E2oDPrL73nR%2FIRG%2BSaPKIjyGhcAiELkiVunPq4nTehBWsFFzN2cXQ5IdDoYmBy%2BaIx4HM0sJHrgPFWzM4iOcI2mjkCXiWf6BJBnMWasM%3D\"}]}\r\ncf-ray: a4a92ba049f656b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:33.287Z","timestamp":1792008033287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:33 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZNkaCevzhqSxWZhm%2FrV%2BSZfn%2Fgsb2w2TqbLaXEwZJ8mb%2Bm9qPqT9Jq%2BS5%2FnPBI62xk1Wioq%2FZrk9PiH6xd%2FRHePMZdv8eXh6Uki3SjzO5R%2BPBDxkguvIKuFPa3%2Bc3YFLar%2F%2F6Y%3D\"}]}\r\ncf-ray: a4a92bc00b4756b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1007,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:35.274Z","timestamp":1792008035274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:35 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoIKT0r%2FrgCht0RoFUgUCe9tz3NNKEE93JWy9xbHfAFcHhzC2MR57E0wefGDFUIZ%2B%2BnkagdLC1UgjvqyBWlSVQmqG1Lk9pg%2B3EaIvDNN5CAXu90rtRKbg%2B2hG%2F72OyFRz5hohPM%3D\"}]}\r\ncf-ray: a4a92bcc7df456b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":981,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/12/22/62d3709e98b346f88c7063bd77f81430.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.990Z","timestamp":1792008019990,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/12/22/62d3709e98b346f88c7063bd77f81430.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/btc.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.237Z","timestamp":1792008022237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/btc.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-a83\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBVchUVshOSskv%2FfoabnqeufwYuAhnJiDOJRu1x0wmCSRfoSJVuEtHceJSTYo6uYvg3xHgB0%2FyBD1Wg6iN6mTRFrNLIFX2RmviJagi7XorG5FXOi3cqySYn0CiCv\"}]}\r\npriority: u=5,i\r\ncf-ray: a4a92b7afc4f5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":3420,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-14T20:34:30.891792Z","times_seen":34766,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":887,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/akl.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.309Z","timestamp":1792008022309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/akl.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-1809\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtYS8dCd%2BGi6EAirwk8bE7pXAaRcH2pcD1%2BpWhgzymsBDB19bsTWlW4Cia8Amxyt4d1mQA5A%2FMDGE%2FY28favoulUd4GKVTQc1IeBfJ8Hnx333KZB6T11avGgJdAG\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b6c685693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6153,"size_decoded":6953,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, non-interlaced","md5":"d258b12e8cf7dc038ecc0f15ce809ed3","sha1":"c40315fada16f2675a6641d41bfc70e6726ef9c6","sha256":"a62836fd9d77f38c180d4c233af4e2a8abafda4d089fa76da25067fbf167bb5a","sha512":"fd3869da65795a1a3f52263bebb57982d7f6acc0cf5e12945a15c6729fc9fc81d0928b502204d66f1a368e85959304e5eeaef81f7a77914c8598f72f8bacf709","ssdeep":"192:rHe3og7qnVmc34vcEKXCWaIdq4JU8ARGqlpLkK:r+3pw4v1CsIIcJgZrL3","tlshash":"06c1b0f3d694660792ced450b01adb2c96cbd4bd93a05291ad3aa08335f62dcbc0ba01","first_seen":"2025-12-21T16:32:24.668246Z","last_seen":"2026-10-14T20:33:03.135081Z","times_seen":5,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":924,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.316Z","timestamp":1792008022316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:22 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXxT790xddWHwSNvOID6BGWjRGSV0al1AIKm0BlTmSHjvcz06F5i%2BhqVWldZj%2FNP7vh%2FAQSf7cP0XM%2Bjxi4PicoadxMqPLay%2BcRcleduKPuCEeukCcMQKEqjBhrBTxvm2HcbNbY%3D\"}]}\r\ncf-ray: a4a92b7b7f7c56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":993,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:23.205Z","timestamp":1792008023205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mv8jazoc-n1gizcl3\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G70PPxqvRDOYKIOSwk4wfOMTkUnaDjmD4AetKcJOPQfoDHhDxhictXAhQLeRujcjgzw5IbCoULPU2I8gbxOj9J7RNEs3wzRK4amOMlEE8D4RLsJoNyHZv6U61HmyjIDiFrNtYHE%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b82c98e56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22763,"size_decoded":3942,"mime_type":"application/json","magic":"JSON text data","md5":"64089d942225a5a58982a307e00144d8","sha1":"e4404accbfb2b11ae63fea30eb1851137da339e6","sha256":"c8c98ac3acbb22af552de6e27c0bcc9da32c2d77ef0be468c4311046824d30aa","sha512":"bc56cfa6b7efe7e263253c5e1a2ec14463aba1dd53047ef02a48f5d23326c3f31d61591d2609782894f0d614621e14989182331c2c8b358e83e0ebe3ec8b6291","ssdeep":"192:mpXE++XUGS2XjHJXej23X73P1Xi3cQO6Xk63X0wX6XhYeX9/SgHCQfguQ9wXtdS0:RMGNISbQ3Kh3ROy9kg","tlshash":"aba25495222c64bdc97f90d11eaf391295dc322fdcc98e1ad6ce4d9c8ee5ab4150bf02","first_seen":"2026-10-14T20:07:41.486624Z","last_seen":"2026-10-14T20:07:41.486624Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:34.261Z","timestamp":1792008034261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:34 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Fi4EWlMXr8xrLC9L2i6IXBnx2qcNJ65d77Os4gNVwVAgcLQCydw7k5e8RXk09DQtRHAZNz%2Fqwh%2F%2B42r0x1lkEMnK0szKPanOwg05FA1HjCpiFIG%2BG39z94U%2BjlZK7%2BkPHGsk8s%3D\"}]}\r\ncf-ray: a4a92bc61c3a56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":983,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/js/views.8541ac7a.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:17.392Z","timestamp":1792008017392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/js/views.8541ac7a.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-2ee460\"\r\nexpires: Thu, 15 Oct 2026 08:00:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbR6IHU1V1oHQzSe%2BN4bM5mBHKt1T8ApFbCsIUXz6qRFLpkwl4Dq3T6V9xzwJE%2FPPlxByWORkbRpp7D%2FKd%2B6FS61ckMZIXC2FX69mzBntwyol5MAcJvptMwITF35\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b5cbba55693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3073120,"size_decoded":809342,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65402)","md5":"0711b476c8cb1ab0b58ba8ab156e0f00","sha1":"3304fb7afc117ab41327548119dbe3dcfefc762a","sha256":"8cd3ed44563966d0b7c4756992e9725c9d2313d94ebfee4eb278f5d82fe34f34","sha512":"5e8448cf002ec3cb3ab9972e2d442eae42e9a27c5e7dbe6e2e442d5877682b4026a88fb666e96571594add0c4d1c584707c40d93c96efb780cf7f58ba2695d75","ssdeep":"6144:2pTEZFzBZG9axzF7efVEe1fRJpNp1ADMH4gyheZAnWPxj7Sfiio0shW3KO2xvLhs:qYLz29OF7qVNfDXOnWBnR4amsVC","tlshash":"83252b08b296b06ad69f6054142f1419e2797a586407c0adf378cce6bde8d88372ff7d","first_seen":"2026-10-14T20:07:41.488449Z","last_seen":"2026-10-14T20:33:03.156165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1996,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1075,"receive":921,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/audusd.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.302Z","timestamp":1792008022302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/audusd.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-13bd\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6nX%2F21Wu2WarnJdXi6MU7%2B%2BGQW7obVKemVqI66AtCBwSVWmYYb%2BhZAvbarv%2BYljQ%2BfcnAV1fX%2F28llQsADaCtvJwC%2BYMlX3343cKJdYrqiTa2M3X7mI1O7CVlJiR\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b6c625693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5053,"size_decoded":5861,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"ee074f44c936e272a3d7d491980cedf9","sha1":"772308b750f40c6f2cc68d77a54c90b39318d3e4","sha256":"550981a424a9ce822e4f864eb7b9b1442ced5a57718f21fc4711b624d936df8f","sha512":"f2e07bc7557830a7a6f71f62fa2c34a0a2ac5f793beffe0007d552d9830e5dbe0a8f63e7b1f3fba6c1d80f4d88d0563b0269aedc07e8a9235a7315c88019abb1","ssdeep":"96:d6kkvv5yuoXi3NLY0EHZbezTDhBWsRQafgowKIEXkrEzOuWO5qtrDiTIm+YWnpRp:MvxQXwxY0ERezT98kjoLKhaf9tsImRWF","tlshash":"82a19ee629219246a5693a7f22bd85dccfe270550e0e8551ff0cf93530b9b464fd2d0b","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-10-14T20:33:03.319355Z","times_seen":25,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":884,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getMt5Amount?coin=xau","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.311Z","timestamp":1792008022311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:22 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KAvnAHTNm3mTCEM01EzlUtRp6nXUk%2BUT1U2ohMVIdnZpS%2BDZ0kOyvMbMfbilwV5f%2FnJzvKAp52MZ82cQZZ%2FSFaMaBn3aiqR8X09Qhg9WdOlt0pMQrZwh2gyX%2BW7SnnepzTrOADk%3D\"}]}\r\ncf-ray: a4a92b7b6f7756b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":979,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/fonts/PINGFANG-SC-HEAVY.1965ab7c.ttf","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.343Z","timestamp":1792008022343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/fonts/PINGFANG-SC-HEAVY.1965ab7c.ttf HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/css/app.04609613.css\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\netag: \"6acd4841-a99924\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BkJ7njUTFGf7TpEx%2FQLB9briSVWXS3GLkETpDaLXmADdQ%2BOtHWr5Hkm5MRIagOQQi1aVIHN4jdsyoG%2FDQjSdkIrSFf72I5CYXZh69Jz81jisf2uNJcYdN3YqFjK\"}]}\r\ncf-ray: a4a92b7bac705693-OSL\r\ncontent-length: 11114788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11114788,"size_decoded":11115537,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa256ec","md5":"c11d4835ea9813d0e654d4c375257421","sha1":"44bdbe2b862dd5f236417788db8b286ebb2265af","sha256":"61a3b6d3ef3960a85ea310f8667b8615da678e9edea8b5036c8d9a09aea7169c","sha512":"1fe75b597c55aa2319b1d0efb5b02e4fd4b4e8a4772cf321100658f80957481254e68756b2e90f2cc7bdc0f585043659a10af097d18995037bd4e59917c18938","ssdeep":"24576:BkgBFPX1+oxFnjOPwVgsVDQezA7FEWXS5ltkCbudYqrj2wn0:BkkZC1q","tlshash":"07256dd3c7c87d299a21fd3c2510f66bf48e50088a25d2f9cf672f3618569744ea8eb1","first_seen":"2025-07-29T21:26:30.325138Z","last_seen":"2026-10-14T20:33:03.160958Z","times_seen":98,"resource_available":false,"data":null}},"time_used":3682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":2792,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:23.217Z","timestamp":1792008023217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ob7KPXdrdmQMhmOfYW%2FUd1RvBdKxHNE53eaX0xbLeC%2BjoACiwS8DNp8S01GWdg37cE2QkefK%2FpKrh5pOuU1Enby4rb08Z5RZY6HSlxen9bjwYDoR%2BWfLegg7GjbxnxzOtYRGpjo%3D\"}]}\r\ncf-ray: a4a92b8118f756b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:25.217Z","timestamp":1792008025217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:25 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLld5vwA46KqUvW3sfvBFzrbF32lcWvqUz5dPXhl7E4T9x3W4jL60fzdZpd2wDyml4gQ6h%2FUNQTbCIxbBo9leazsEiqRPqMosEUOBf6kbUbdpXSWPvS3AePJdjjwL9yw3PMV7i4%3D\"}]}\r\ncf-ray: a4a92b8d9cab56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":971,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:29.752Z","timestamp":1792008029752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:29 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkz7o4gVrk27wNNguFjRMi8BZXEP7uhEdfdEL6SFMIYwj%2BTiLaNcEwAgk%2Fj%2FYOs6J6XXXxx6ID6DOS%2FJuYbiLQuf8px7aZvT6MxgABfVx2M%2F4OMKs%2BYY23D6p%2B6RNqqwd5J3d7U%3D\"}]}\r\ncf-ray: a4a92ba9ed6656b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":997,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/js/app.199b0cee.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.339Z","timestamp":1792008015339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/js/app.199b0cee.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-a9af8\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNHLWZtYoDODC7utHsZ%2Bz%2B5rlNLbon%2FSUI6s8R8L9CXJnumMyHCCcHFTTNHukWeuZWb5B9j6o1IrayhMepSeqYKX9h9nQsTssv2lxlVAENrHXYFOpn9SgkSPguWa\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a4a92b4fd8c05693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695032,"size_decoded":181094,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65473), with no line terminators","md5":"b6505661923a3e8123617e39fcb2c000","sha1":"19afdd45399d7e2c646c0dc19ec93d831a0f3210","sha256":"d1c90bcfed69b6e80884be611ebe840556e309e208a2ae357259a3bef0445418","sha512":"40715e853b397fb0e79d2717979d40eb0627a0a7afd88e50c314c504a49c7fa90cf9586d7c3773e953d0eae1127b36ed12c0f3d510757c1692dcc984aaff3615","ssdeep":"12288:Un50MNPOwhJjwkdgIEo3DyMCDJ0XJEZMb7dZf5BgBFDEEIcj6Ybs/X2zi6vHS7jd:W50qG7A/Gzi7jEwQ+","tlshash":"28e41777278bd8e721952380706ab6a5f16cb899f725e4d005f8c2dfe1e6907d803b27","first_seen":"2026-10-14T20:07:41.494836Z","last_seen":"2026-10-14T20:33:02.963389Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1173,"receive":443,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/16/b8de90f3d309479285f9220c63aef7fa.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.987Z","timestamp":1792008019987,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/06/16/b8de90f3d309479285f9220c63aef7fa.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/vue-router/3.0.1/vue-router.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.346Z","timestamp":1792008015346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/vue-router/3.0.1/vue-router.min.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-5feb\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Ujqw%2FicaqOjYiVQVJcswmNvXbGF99OKooVOoawAWcLYVmifhwHCgzD5ApeQo7uQzcpQbsJ2p805877oLMNRUfMMP1qoXlMMe133ol%2BvzV0d18TfGx5w%2FNt0wbe6\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b4fe8c75693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24555,"size_decoded":9436,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24485)","md5":"a7656f4be720b1580847f9783d6ab4dd","sha1":"d3582fc6fb317199378638d2a12b4186fdee19eb","sha256":"9d5542c396b2102deb7390b39061aa7ae35f9329dfab9a34823cf84396b8cc13","sha512":"e31c23718a86b6a46355b975f29854ad874351005a9c634a56cfe8f4126198be7d6ca67cd95ba24135ce8cceb3b6dd1b4eaa8f9d4aadfe4061210f4c7b8052b4","ssdeep":"384:Oxwp+JvwAmXRZOYQFoB5RKbKBpZn6ySH1DhUxjImhFVP:Fp+JvwAGjOYQFoB5RK+nnTMa/hXP","tlshash":"b0b2c69db582b03247d326a0816f150bf23b7999744e84a8f2a9f4d43cbd85e8427f7d","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-10-14T20:33:03.158571Z","times_seen":348,"resource_available":true,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:23.365Z","timestamp":1792008023365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmhmfHVcTJLj4X4rDCwB7JpFETrZExpPy54GIH9lNqIgAP%2F2HlYIOzifWc0NJD4LthnfEi9lygXyW0s65t2FajVtgub6P%2BbVHuFWP1QAc%2BSVDN%2FBthQJNOkTyxMEMByBlLzRr00%3D\"}]}\r\ncf-ray: a4a92b82094c56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":993,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/vue/2.6.10/vue.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.342Z","timestamp":1792008015342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-16deb\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFiFlATYN3Y0uHnknmIms4SKMLH6FxcCorYgnkJ7Fmw2Tg9VhyKrp4aZNOb1R9qCvd34V7atEXGkUbcHdSDd9WWkLmDaS9UhLJ8a3%2FOYCyDHG7e5zve3rcAyC5Iw\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b4fe8c35693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93675,"size_decoded":35087,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-10-14T21:14:42.710745Z","times_seen":4860,"resource_available":true,"data":null}},"time_used":1105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/platform/dev/config.js?1792008017348","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:17.698Z","timestamp":1792008017698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /platform/dev/config.js?1792008017348 HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mv8jazoc-n1gizcl3\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:18 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\npriority: u=3,i=?0\r\nexpires: Thu, 15 Oct 2026 08:00:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: W/\"6acd3ee5-a6\"\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FBKPJsgl7CFXLH4WA0RBgQ%2B0CVcs0ZfNN%2Bg%2FZFY19TkeB4MMYLhXmw%2B%2FbBZrh9oPFT6k%2FxDNM3ThsWpaeG0EKES%2FdVj76I8zSBJGMqR%2FrNi4%2F7nmNUHY0V9XnOX\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4a92b5e9c185693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166,"size_decoded":879,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"e576f20ffc3ddc9fe92ef7c388869315","sha1":"67e798a79a81fe3672c3a6e52fb73f026b49ef12","sha256":"f9a5dbbbadf3e57e4e8d292e18fbb7c6d9b588ada4973cce1baf330cc41a2422","sha512":"9fd5adc74568933197e508158a8a316b30c077704aca8a3678d54fb8044258db1864d7a76b0bc804359cdf0ca9bd4beae54b0b5656654c52a1d911c24131802d","ssdeep":"","tlshash":"84c04ce625759b092d70473a9acc5e31f4424333c85d421fb8bc5c002f7340415a8c71","first_seen":"2024-12-02T08:41:53.512891Z","last_seen":"2026-10-14T20:33:03.340885Z","times_seen":49,"resource_available":true,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":934,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getAllSetting","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:17.699Z","timestamp":1792008017699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mv8jazoc-n1gizcl3\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:19 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0JepZ0lY8sxg5eLaGaqBMI%2FWGCC8g6e0gXBGZ85PcaeRWu6UAgVa6p1AnKbjJ2kihFMI19JQwf1LWZ6TZBDizOXrfnwxhS4eHyoDK7f50uRMYlORFGFfGTw4L52u5xMfka9MEk%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b64992a56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15956,"size_decoded":5486,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15572), with no line terminators","md5":"085c955713ba7b32db8c194b15695989","sha1":"7374221bdb760dc3b2cbe5b910be7176710b378b","sha256":"04d11c2ea481e8b9f5d2f958c63468b9c522f467eecb937a271cec764c330145","sha512":"8d68e7e02830f7b2afb8e2b1518c12ad4c1b5f69523df00c6ce777c97c20c1e7fffa616b80e7314089e45713d90092bb32178211f17d7b26daa9e821e4edb71b","ssdeep":"384:T22PRJG0ijiHpb3TSGiTihAY0cwBinwy3om2edG:PRJZtDSGiTiOYZwBinwy3J2e0","tlshash":"2862729a30ecdcbea7df16c2a0ef395479ec1857d894ac11e4abef4c98d6974480f049","first_seen":"2026-10-14T20:07:41.502838Z","last_seen":"2026-10-14T20:33:03.172076Z","times_seen":2,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/element-ui/2.15.6/theme-chalk/fonts/element-icons.woff","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:20.001Z","timestamp":1792008020001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/element-ui/2.15.6/theme-chalk/fonts/element-icons.woff HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/cdn/element-ui/2.15.6/theme-chalk/index.css\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:20 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\netag: \"6acd4841-6e28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMLHJnO%2FgCDtHpMel9MJ4DapPRIovx%2BiCwBRs6%2BC9%2BjrL34%2FQ%2FLvkEFj0W3GXkcWTU1OTUtbInq4Y3%2BZ3ESMQ0V3%2B%2FlcY7c8A01xdoXC9EWdrBkOWtMFWnVoB5p7\"}]}\r\ncf-ray: a4a92b6cf83f5693-OSL\r\ncontent-length: 28200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":28939,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-10-14T22:32:29.559492Z","times_seen":30484,"resource_available":false,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":893,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.251","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:20.004Z","timestamp":1792008020004,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Wed, 14 Oct 2026 20:00:20 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 11950719\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACFDF54232B91353501DB4E\r\nContent-Range: bytes 0-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Fq+h2big38MfdDRn0FG2pQ==\r\nx-oss-server-time: 42\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48543,"size_decoded":49152,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"116ce22122fc1932341d51a0d8c1b698","sha1":"51a3f16db7f7d49993b0cb87a1c3a386fd84713c","sha256":"dc34aea18dad5bad935a57b35e2131d94f2b95056b8c2a0f9e458d17604e1249","sha512":"a2ea28e5a85ec2a80f300c659d36b5c4491cd7522c07ff777ccf0993d595f3120fa592e18f795359310902b0efc7ac7ddf00dda63bebf613cf2255e7b70f30ed","ssdeep":"768:fEBHp3FCxEW7jIL599uCIc8wNAurh0ZjDgFLeFrU8zq5hNlac4jzuR1:fmFFGEW7ULT9u1c8wN/rOjDjFA8SVa1K","tlshash":"3a2302117ebc945cc9aff2699f83e1d692d11a14d98d798810cfb582c01ff62e8b21ed","first_seen":"2025-06-17T10:35:11.708565Z","last_seen":"2026-10-14T20:33:03.141828Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":0,"dns":40,"connect":195,"send":0,"wait":240,"receive":40,"ssl":570},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:41.324Z","timestamp":1792008041324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:41 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qQ%2FecHIwlcRveR%2B44QTZdCb8aEucXqMCeZFmY7MC09VvcBcNKnGh5%2BCHLNINSYyegNO%2FWC0pOcIivH%2BI9VMLlbkX4Pbs8q3UdrsK1jpZJAN%2FRdI4YKDRFcy37HOcfJAIoLDaDc%3D\"}]}\r\ncf-ray: a4a92bf24e4556b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":981,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/12/22/5300c94a376e441a802234735109f924.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.981Z","timestamp":1792008019981,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/12/22/5300c94a376e441a802234735109f924.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:31.183Z","timestamp":1792008031183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:31 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9WM90jro%2F6uu%2Flloilo%2FO%2FHLWrPAZjAflj8Lgz%2B%2BUZDSLoR0CYDtfz06fZUTuIUk8ySEmhWpXe3jE6TK%2FMZbrKPXi0baepo8W9%2FbrZcJln6cZiuRlPiUJX16n7bWCSlxI0v6nY%3D\"}]}\r\ncf-ray: a4a92bb2efe056b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":999,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:33.252Z","timestamp":1792008033252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:33 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVk%2BO1xokwb5IfedAAf721xnqCiU7dX%2FqAxRIgn8brgJaKT8dDnDCNcnJlqY2aT1xowto%2BWk9HSKpMoZdrj2VddIJTyRAvzt91BY%2F665ypR4pV8a3U5m4XyiUVMW1N6vx83%2FLdw%3D\"}]}\r\ncf-ray: a4a92bbfdb4256b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":979,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/nzdusd.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.272Z","timestamp":1792008022272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/nzdusd.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-1313\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FHlXvNKR7Y7doOXcTDwgF0mbAqNgWCFAWz%2BVbC2ycU5BJc3pnmEeD84BLBJE7MqPXVG%2FKW4pCTVocJDxotHXr7amO9u9%2BE78HQ8D%2FJ6vMm5WIe9byH3bqEwoMXU\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b2c5c5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4883,"size_decoded":5683,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"02b89264b26d3a3507e8e99725d789a8","sha1":"661c601f315d6032aa3a437346ab8cccb11452f7","sha256":"ca39637a1c539a0aaaf7c6d19f197213fc6a88dfb713f6bfb5e9daa68ba1bd9a","sha512":"b6552591602e066d5effad94de93c564aa815bf5f0ca2d0a9918e60b59f75b54f32644f4e98458a649cc3e97abe2c324f4fbdc7580db3c6222a8c04c57a85111","ssdeep":"96:7BjtHONS/9HuLfUVe5apNLzGmTEHsDT0TlowP7:7BhHO4/2fUc4NLz/cOgP7","tlshash":"92a17ddbecf89e02366c5c68239336780cffd5382ba099676177440bb19c55d744aa9c","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-10-14T20:33:03.188444Z","times_seen":33,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getMt5Amount?coin=xag","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.314Z","timestamp":1792008022314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:22 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGDoCgG5gbZsqrJILJg0K6EbNefpmScZ6L7zaRDzHyseaYJY%2FzBkDNQHWA%2FqxfvNo7FP9VSu%2Fo%2BE%2F%2FF6%2BnGtDr5jJiHDThD4uGKXxwV0Bz7kWiEGVnuuZhVBDUqd7xPIc5X%2FbRg%3D\"}]}\r\ncf-ray: a4a92b7b7f7a56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":985,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.315Z","timestamp":1792008022315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:22 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2F9K0KiMmPooZacH2a190JcIj%2BlFnv5sC%2FSRzZ0PP0mqMnAmSzIjX1CgBZmSwF0Jrn4dFMf6dBJWICLSrUi7zDsg4elxyQ%2B6YJTSfbEEAqsCAVWaP6wCU6w7SgJNf0CtcswsPok%3D\"}]}\r\ncf-ray: a4a92b7b7f7b56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/c730913a9ab1494d92b9bb71ce7f97b5.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.991Z","timestamp":1792008019991,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/c730913a9ab1494d92b9bb71ce7f97b5.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/charting_library/charting_library.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.333Z","timestamp":1792008015333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/charting_library/charting_library.min.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-2a6a\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fa%2F6F3W4RkxFN5h6RGbPaw3O7QEzt5fTTjnPaWvU2TOpd1zraDbI76cZFU9fX55cI1IxYcQe1DDNn01nJxvdCKvsZY2xvOlQKRo6zDVS4LoVZQN46f9AZLchCz9i\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b4fd8bd5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":3958,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-10-14T20:34:30.886853Z","times_seen":1528,"resource_available":true,"data":null}},"time_used":987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":987,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getAllSetting","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:17.704Z","timestamp":1792008017704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:18 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYdfd6Ms%2Byo6lcJpWNeJGgWOZXZB65LRiZswP0FFuTmaduQFdqTaxePlNKf277ENc%2BVEmKAWFbutmrXw%2BDJs%2BztpU7wODvcbcJKOh9dhUqSAD3HriuTg9Ilxmv2ccheSgwXqHPY%3D\"}]}\r\ncf-ray: a4a92b5ecfa856b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":926,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.975Z","timestamp":1792008019975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mv8jazoc-n1gizcl3\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:21 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cMO10N%2FYmB%2BYk0Zq6MlutauvMU5IGa6vq02CY%2FCe6BV%2F1P8orBAf77p2uS7gCcbqVLKAUEAvmZBIqJGe6cWIGLWa5n6F%2BkNm7XC7o2gmxuM89bRfyx3RUBZkHUiWEDbGJqwF0c%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b726d2456b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":896,"size_decoded":1457,"mime_type":"application/json","magic":"JSON text data","md5":"ba79fe8421c34275234180b3cb6f92c7","sha1":"1d1e0345aa83fdb3bd628730d69ff5259f6fc867","sha256":"edb3146334eea44db9168e0310dd0a483ea98191b0ff262899d366e0bfae1072","sha512":"3ef599db3ed337e934cab03e5eb542c7374dc1a85249dc7717d56c1c13fbdee4fdeb925a1ea65eed089504e1bbf5f9b1efbc7af71d5acbf999473629bd1d70fb","ssdeep":"","tlshash":"2b11cc1622785e369d02c6ca76ddbac8a27e4997a6618c34624e8f0c53f20bc167e64d","first_seen":"2026-10-14T20:07:41.510084Z","last_seen":"2026-10-14T20:33:03.343804Z","times_seen":2,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/16/30fc28bfcb774a87899386d25c7ec48a.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.988Z","timestamp":1792008019988,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/06/16/30fc28bfcb774a87899386d25c7ec48a.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tetmksells.com/daou/echo-res/2025/06/18/838df23361234e1186e31d73bd58f37a.png","fqdn":"cdn.tetmksells.com","domain":"tetmksells.com","tld":"com"},"ip":{"addr":"8.210.242.77","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.265Z","timestamp":1792008022265,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.tetmksells.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:10:14 GMT","end":"Sat, 28 Nov 2026 00:10:13 GMT"},"fingerprint":{"sha1":"10:B4:41:CD:D1:DD:DE:CD:D3:1A:E5:07:72:4C:57:04:9E:9B:41:4C","sha256":"BA:86:E6:D4:08:85:B3:D7:35:BE:BA:C1:C0:CB:9F:D4:89:EA:E0:00:B3:46:B6:E7:D1:67:D6:AC:4F:EC:A6:4B"}}},"request":{"raw":"GET /daou/echo-res/2025/06/18/838df23361234e1186e31d73bd58f37a.png HTTP/1.1\r\nHost: cdn.tetmksells.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 14 Oct 2026 20:00:22 GMT\r\nContent-Type: image/png\r\nContent-Length: 13411\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACFDF56AFAD5B3636124FC1\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"4F66703381F8907C062BA688A482E498\"\r\nLast-Modified: Sat, 14 Mar 2026 02:53:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3495675010816551969\r\nx-oss-storage-class: Standard\r\nContent-MD5: T2ZwM4H4kHwGK6aIpILkmA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":13411,"size_decoded":13888,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"4f66703381f8907c062ba688a482e498","sha1":"d9e024f504a9d7894e56079552cf98164d0cbebf","sha256":"ce65303cc2f0a2d80774cd0c704f47d0d90f54013a4628ead468ad10ccdf9d79","sha512":"d1539b247a7ac3c9d228f424f4e8b018bffbbef4280cb454f7d526fbfd9417918128070d8722b6225b1a57456df587d0eed8ed4987b27d530b5817752f7d46a9","ssdeep":"384:d6Jn2JW3F3h7EKPqYJg0CVmyBhxp6j1tyOk22/V9x+xOHD+:YJvNClLBzIXUUxOq","tlshash":"2e52af85fd26eea1b3a8cd066ce95243773703c48690b441fcce2913666207acd7e99a","first_seen":"2025-12-21T16:32:24.692969Z","last_seen":"2026-10-14T20:33:03.032865Z","times_seen":13,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:37.854Z","timestamp":1792008037854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:38 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2F9xF%2BJM5mziLCKKiEPCpbfkckUnht5HaEmlV%2B4yXN8ttDO471kZ7i%2B5YESo0Cq4SZBN4etCoDE3g%2BaeWYZZwRznq9HdqHZSiyJXdowLaTTjYM6b%2FBJeo5jAsdHx9s67%2FXXo8FU%3D\"}]}\r\ncf-ray: a4a92bdc9a5056b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":997,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:38.302Z","timestamp":1792008038302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:38 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Bqv6zgcskh%2Bxu7vMDgxJIS3ym4anO%2BHv5Onmp7IRbhNkClyArEfJ0TM5i5i7%2F7GjI9s9Qh61J%2B1mA9%2BDjouKcQiUZYMx2ucbHYt%2BCe78cYYbg81RLc3vSzJ%2FnYl2P1tetrXC14%3D\"}]}\r\ncf-ray: a4a92bdf5ad056b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":985,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T20:00:15.036Z","timestamp":1792008015036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBOZxQcB4FjNQ1t6DuNTfHe19VRpq8taRcuIE6m7n0LMbF6ZaH68oE7Q0pF75IsJctJdqUG0XegYH34cCSRF6WBCxO7k9uWPvxRxig7p9VUm0SPSxxOxme06aIJI\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a4a92b4df8465693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.0.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]}],"data":{"size":4386,"size_decoded":2511,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1483)","md5":"44c61ccb550b6636da96cd55979f17f2","sha1":"daf96fd828b93ba037b20030244f6bbc02844dbd","sha256":"a532645a3bad38bab8474559e189e6fb12d809ccba6512226b41c2a75ae7d0ea","sha512":"a038ae469005653af9272de8c57101b4c95ffadf6761c8ef6bda6f20125993f197eef2948a5f74a61097526b57adda0df4679e9cd8f4db3584ffa1a875132667","ssdeep":"96:AdJsRqgadjE558EMq8qC7oxfI34X50DGHnb57uidLo:AYRqggk8EMq8qqWYGNuidLo","tlshash":"bc9193568d16c45f35620d99f7f9f10840a5e04b9d91cc18b9bc578c0f7cbcc89b3a9a","first_seen":"2026-10-14T20:07:41.514207Z","last_seen":"2026-10-14T20:33:03.24453Z","times_seen":2,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/xag.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.230Z","timestamp":1792008022230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/xag.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-9e1\"\r\nexpires: Fri, 13 Nov 2026 20:00:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEp24JhQDuu%2FXPdaGKV8pu6MxgOed9ccfKdcdQTwutmjUJWAND5jBGynhwcT1iEmPcgZZmz8CogABPG0o8leWiAaaBmPTRV%2FVdwXOewAWvifvf3qH2pJsrKEKB6H\"}]}\r\npriority: u=5,i\r\ncf-ray: a4a92b7aec4c5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2529,"size_decoded":3140,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components 3","md5":"a0a6e00af7b14494616bd030518e4552","sha1":"69f0fbe82c630d55e02834f41bd21b26a2812400","sha256":"d65a77c83c74dd4a79026135658cf502446f5755d0dbb1741f1c52d5ce1b1513","sha512":"4349094b978569520997d74907c84156c149d69b6c9f736a32febabee136c8d79bc16e3d0ae65be717aeb9228535f56248667778509c372fc2ed9d73f8b4588f","ssdeep":"","tlshash":"84511a69ceb024d6ccb8c47da2f363a2ef963322ec8455a2d047119171372c06c9788a","first_seen":"2026-02-19T15:44:21.829778Z","last_seen":"2026-10-14T20:33:03.246934Z","times_seen":39,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/xrp.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.235Z","timestamp":1792008022235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/xrp.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-8e2\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlnGa2VJxkXKob9oFr5MLwz7kNOns9W13eVWSzTqYipSIvpAloLReZIsXcqaa%2BLLD2pwUKQ88BmgNucxWdALgXI6m8CKVsuWRVH8V%2FqSxWg3qdpIX%2FfIHD3KA6cp\"}]}\r\npriority: u=5,i\r\ncf-ray: a4a92b7afc4d5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2274,"size_decoded":3066,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-10-14T20:33:02.992701Z","times_seen":6755,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/avue/2.9.5/avue.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.350Z","timestamp":1792008015350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/avue/2.9.5/avue.min.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-49541\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPV%2BYc%2BNdx47gxkqr%2FoQ8fGiku8YbfxwFdmsBJvLUU9hX8pO8EBgZFaq9oXk0N%2Bb%2F99xtgyY%2BTI9kyjk54ylHPQTbT4z8cXcsKPhMoFN%2FgD6aUWgK%2F6pQ8djXC9d\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b4fe8cb5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300353,"size_decoded":78301,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55624)","md5":"750459dc86246c289cdf5b760013f43b","sha1":"8103e042309fe4007cda921497f28410a75656ba","sha256":"5df0b88dacc1f9ae9edc0adc120da6190632e03cea789186cfc49d532918d6bf","sha512":"f9db639a43a21ca3a54d2546999e885bc0057f1b29eb9c2a1b7e5510dfd284530992a97c9642d4ed87357a472b7274b229279fdd45251ad9bc7c03564747375d","ssdeep":"3072:8mWzlkGK5sT4v9rD/2S4oqJNtvywiDjD7TefeKceKsT1/tF8vUoa:8mXqJNtvywiD37TefeKceKsT1/XBoa","tlshash":"50540959f1cab8750ad76070003f210af2372b896409d0a4b679d9e1adbce4da16ff7d","first_seen":"2025-03-06T09:16:43.423938Z","last_seen":"2026-10-14T20:33:03.151902Z","times_seen":310,"resource_available":true,"data":null}},"time_used":1414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1191,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getAllSetting","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.973Z","timestamp":1792008019973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mv8jazoc-n1gizcl3\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:21 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKxIl%2FfEuHalZEEV200sfNxmiAczF%2BETCURjWQ6TgDLK6SEeQNOXJzetMwL3yNVZ%2FK6rMNa3QSSbh8yYbeebweq5F2RnjOe7Zd%2F%2FHK6YkcyUNFumY5pJAAbLHUO0%2F9%2FnAhjy90c%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b6eec6956b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15956,"size_decoded":5498,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15572), with no line terminators","md5":"085c955713ba7b32db8c194b15695989","sha1":"7374221bdb760dc3b2cbe5b910be7176710b378b","sha256":"04d11c2ea481e8b9f5d2f958c63468b9c522f467eecb937a271cec764c330145","sha512":"8d68e7e02830f7b2afb8e2b1518c12ad4c1b5f69523df00c6ce777c97c20c1e7fffa616b80e7314089e45713d90092bb32178211f17d7b26daa9e821e4edb71b","ssdeep":"384:T22PRJG0ijiHpb3TSGiTihAY0cwBinwy3om2edG:PRJZtDSGiTiOYZwBinwy3J2e0","tlshash":"2862729a30ecdcbea7df16c2a0ef395479ec1857d894ac11e4abef4c98d6974480f049","first_seen":"2026-10-14T20:07:41.502838Z","last_seen":"2026-10-14T20:33:03.172076Z","times_seen":2,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":856,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/eth.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.225Z","timestamp":1792008022225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/eth.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-264f\"\r\nexpires: Fri, 13 Nov 2026 20:00:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sT18Xa7ETZW8eyApESJmslXPyq3d86gnLjij7iIiLkfQGFphHhunFCZbHP0VeakkVNc3HBMJfqEn5Jd4tM3CIDWoAONir52B4Oz9C0T7P%2BW556hKemwnibjQhERF\"}]}\r\npriority: u=5,i\r\ncf-ray: a4a92b7aec4b5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9807,"size_decoded":9672,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-10-14T20:33:03.166743Z","times_seen":948,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:31.229Z","timestamp":1792008031229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:31 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsyarKMLsJF%2F3varlbRJA1ZlriX8awiGwgtO%2FT%2BAe4Nu0nv3eCKbPy6C3NlJWmm9hXcHpWSXSN3sVvX31RDvIAVvj%2BjINmu3IIqIc30irfMvDA0vNjI21xxmPf9Qu6RN6tqu0ZU%3D\"}]}\r\ncf-ray: a4a92bb32ff656b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/bnb.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.251Z","timestamp":1792008022251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/bnb.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-3245\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2hf5S2AHblEUHgqSggVjza3gSyEeKyU4s397FvmM2CUQKAa%2FVVVM820HQwom%2F2SvLBZPjSFCjQkGX2ql64Z7vjDSnZ8DDgA93LuJrZOzw3j5biMbLfMv5g7kQ%2BwH\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b0c545693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12869,"size_decoded":13579,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-10-14T20:33:03.147318Z","times_seen":6789,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:40.055Z","timestamp":1792008040055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:40 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2344ubksy72O0t%2FRn4yAFNXf3A9Y3zD8HWmhFcOZRyLYHVkjzJ2SADfF6v0iYR0wQ1cDz7ShADn5%2BE%2B6yf7fRMJXzMR2mqFfNewhys8BYCeIStI2aTrEaGAmZ3WO8%2BKLsCYsLDM%3D\"}]}\r\ncf-ray: a4a92bea5cc056b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":991,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:42.338Z","timestamp":1792008042338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:42 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kr1KydqzQ93z7dUMzC7M%2BKmscqJeV5SqsQRdgXnhIR4b71BJ1oLAvvPXaBoNnGr0q0GWmb4BNBhynxjgo7OlVt66wInSLesATHnSA0U7YiAVMOddReJ6lcWYlShoOh8fMDtnqgM%3D\"}]}\r\ncf-ray: a4a92bf8980f56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":971,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/12/22/63fb8b7a21af4651a935ec469e434741.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.983Z","timestamp":1792008019983,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/12/22/63fb8b7a21af4651a935ec469e434741.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:35.050Z","timestamp":1792008035050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:35 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lt4yWLUn5EjDrU1Jgxvz%2BoGfcwbPw41UND1jCVBr0xcIKGTVgyw%2FQ1ASX5FzVogcqH46pROcJzqVJn7GnZ5n8VD6VQUFuaz8eHcOTOzVJC54UNhAz7Z9m37Jf1wnxuEuqp3XLGY%3D\"}]}\r\ncf-ray: a4a92bcb0dad56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":987,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:41.005Z","timestamp":1792008041005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:41 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NH5aZM%2BT0PqcJ6Eoidd5RO56Is8kLg1%2BWVybmEMYXvWKc1qoMApUwjllIcG4sG7tXFmWWqCb6TmXRsOC6q5quaput61oecCDlhMgxEqnX1ffxmc1pBOrZwA0kf57L4cf0eBPCMQ%3D\"}]}\r\ncf-ray: a4a92bf04dea56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":987,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:27.210Z","timestamp":1792008027210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:27 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5IRTVk%2FZh4pZrr8tUa4kKs71wPqER5xu25u9YEYEqntbv5URKDZvDGYucURW%2FanyMtRDmBWnmtCTUBOfLMSZX7bxUVJ6UIZ3MFpPrmpc8fP18bm2ccS7mq4PNlo6cPxqRBLFos%3D\"}]}\r\ncf-ray: a4a92b9a080156b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":973,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T20:00:13.851Z","timestamp":1792008013851,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Na%2FDn7HKjblCjrm2epJkk0FuZLnfPf%2B50eFCX6soYhY3K%2Fuj%2F8wgEwDNeh5JZhACDI%2BzWC3stgMIw%2BG8R0U1NY733VdzBAyTh%2F0XFwjpj%2B0AIVLWZ3LtkD3b0EHd\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a4a92b46ce265693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/axios/1.0.0/axios.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.347Z","timestamp":1792008015347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/axios/1.0.0/axios.min.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-32a9\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9xB%2BqBzxsGyXN75wJyy4syk8cAToxyg5l0o33xt4nept0g0dfuNSkzA5rS9jCnzkTF73ZSSf91z%2FiP%2F6v%2FgujjP2VSk%2FkQOElYfavSqq%2BfO54URsVpgzgudWeh9\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b4fe8c95693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12969,"size_decoded":5499,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9720)","md5":"76235a7ee6b454034b80a390ccc92f37","sha1":"8a84e29a036660955f3ebc42d43bb522730b5707","sha256":"3c92bac09bac9bfd77f2ced65b63e009c9b67c109a9d37de637b3573d7ec7adb","sha512":"35c36d820651548001703c6458cfb922c55c12bd8c0ed73a8d095f0656e45c345e0f4fb2fe0e037d14009020dc38bed1e349d110b3f9f2f50dcfa0f05f8cbd08","ssdeep":"384:3ao8KGKMMT6nbNp0nkJFP5F0YS6DagzzNYT9eei:VGNp0EPb46DaT9e1","tlshash":"f242a7ce78a1b0d747f320f0905f5a0fb2b6992a644d84a0e560e8f66db546e8737f4c","first_seen":"2023-06-26T22:56:34Z","last_seen":"2026-10-14T20:33:03.163669Z","times_seen":397,"resource_available":true,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":995,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:29.218Z","timestamp":1792008029218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:29 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zXTUs8nadV3AqJC%2BpURX6S013TQuDx8IirtNQS4%2BMBs7UOp8YFya8EO8icG77Pj6e54OltGbQ8Wg2WT%2B5eBd2qiZhfS8LXN5NItfZhyf0eliW2JVYtVRBtoztHVFbgrgntaJ90%3D\"}]}\r\ncf-ray: a4a92ba69bcf56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":975,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:35.971Z","timestamp":1792008035971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:36 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEZ8ywsXSFTRw3dn0h9tkgKuJ04UdPF3hMf%2BA9OHuvjbmva%2FvDo4jb1P9CUGehkNHXuLK5N0DA5fRNy4Ruejw%2F84hzkq4ijkW%2Boc24Htk6%2FPWuI1DFrhSC%2BshjCGtkaKNPZABZE%3D\"}]}\r\ncf-ray: a4a92bd0cf2056b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":995,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/element-ui/2.15.6/theme-chalk/index.css","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.326Z","timestamp":1792008015326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/element-ui/2.15.6/theme-chalk/index.css HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-3a430\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zg7swCtf5Adgg2aMiKQoGsjJjAzeRAPY3cUxFHHxY3tfcMDK4LijYIMdmwDOM2g%2BmKzweesmBlT0%2ByIRVvvCkLtk6hiA4qvUFLewW5rb8bakqJoBlUF9DcqG35ER\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a92b4fc8b95693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238640,"size_decoded":37983,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2e0bf3411d54afa6402c0f114fc5a7cb","sha1":"0fcc1045629f8fa599d74eb33e44e5eb2406fd49","sha256":"c8df4deb1eaf507ea9e4c383d563c8f3bb6d35c0df018d5623a8e93d28df2a57","sha512":"4552f7d4f4119c1421778860f37fe49c27c28a0f77f957a9f176fab0001edb32e7b999a718e527087cf3a9c9c1c08d2e91daa01d357c2738fd48b606c47643a8","ssdeep":"1536:f28Y7SrW3YeWXA1u9w4HCe/l4Ttg5fqMEL0e/78OaiZkW1YO8eQFsGmtf0IcXyrc:k3H0Rkfeyl1hUEDw","tlshash":"0b34a7219b07216b612bde6db6c0ba895f18c323d4725bbbfe95740cc7d34891263a4f","first_seen":"2025-03-06T09:16:43.421068Z","last_seen":"2026-10-14T20:33:03.181667Z","times_seen":77,"resource_available":true,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1226,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/element-ui/2.15.6/index.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.349Z","timestamp":1792008015349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/element-ui/2.15.6/index.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-8f20d\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3rs%2BgIVwL7J%2BAtrBrU%2FGAqqoyU2y9Y5x5Oy%2FCwjX7NHGzaNF5AX9Cs8WrKbncQyx9%2BTKGgIlnFpxcJRopu0JKwZx24Q5dMx%2B8Gh4H%2BBZdfrtcw1IeFamQ80cW%2F7\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b4fe8ca5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":586253,"size_decoded":152007,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"693f98461ce3fa58cbe5ac24d9a21b1e","sha1":"93661cc05514da433809e79f229815ae1ddbee77","sha256":"24ebdea828e938d3a45128b41979b320b4cbd40c8c0d4bad6a9cd9bc3bfa4e0c","sha512":"2dab95b96bfccc9f78069504b006adc198531831c53c81b23b8d05163428f0a66beefe7d466452e7142cbe98419e36d327b20ab24dd3c25a05de9f9363e05d3e","ssdeep":"6144:B4lry61ETrc+kymEidUVM+u0kXzVXsnDBH7SuLH8isMZgS7Lu5:2U61Wrc+kymEiuVM+k9uVHOuD7Lu5","tlshash":"d3c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","first_seen":"2023-03-07T13:53:00Z","last_seen":"2026-10-14T21:36:25.19533Z","times_seen":633,"resource_available":true,"data":null}},"time_used":1537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1108,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:32.158Z","timestamp":1792008032158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:32 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KmJKTGvhvlKq2cSmtUYPgfJDs4%2FpsS4LdU07cKs8IC%2FmJ8%2BhXr%2FAdxePCw54EPXnZxfR5Jzmhlb7RpOFDTBU%2Ftk2Xw3wKp0qa2jRGY%2FhafTY%2B%2BFfVI0e3SjEL6GpsU%2FeZ8VEz8%3D\"}]}\r\ncf-ray: a4a92bb8fa0e56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1001,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.994Z","timestamp":1792008019994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:20 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKb1Dwt4UTRaORBgSj8kAWBStwOfZGuq%2B74CGH5BV5niMlWW30NpE9ZhjovcSbL8zbJ8Oockott460fLrAi24FP%2B1QAzfE%2Fcy4h5wYaBLxQ1LfxC%2FOlZrtvvTEyIA32rZi3NOMY%3D\"}]}\r\ncf-ray: a4a92b6cfbec56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/svg/loading-spin.svg","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.354Z","timestamp":1792008015354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/svg/loading-spin.svg HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: W/\"6acd4841-1a6\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQVTM%2F6ME7I7j1ILwYe8z1PIeGKOipXzghM%2BHmvEXZN25IgCdzfrtj3t4ZguLZjRn3BxxkuI2MNy0HybPKIly4uU%2Fjv7K%2FFwN5aBCqObtOB08pXySXRykiZmAyTY\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4a92b4ff8cd5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":984,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"037f0a4f642ab8e77b624c3397411ebb","sha1":"32472bcb995af56caeecb9dd747bd56545fa0b8a","sha256":"8af421d321398026263f9eeb85acf0130787e4d66ee173dd2023d291b021d59f","sha512":"fc66e5c04f76fd183f2e64aa86ea80c93d24805219d3ac5b59968a535b27a4631905f389d02d93979bd1e941b81ca683040926d6257ef584ed341ce216ccdc6e","ssdeep":"","tlshash":"00e02bb9ec1e660f402e479b6aacd800239dd2f127050096e72c1c39680f419eae7149","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-10-14T20:33:03.242204Z","times_seen":383,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":974,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tetmksells.com/echo2-ress/echo2.0123967f3a6894feb95143321532fdcf6.png","fqdn":"cdn.tetmksells.com","domain":"tetmksells.com","tld":"com"},"ip":{"addr":"8.210.242.77","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.954Z","timestamp":1792008019954,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.tetmksells.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:10:14 GMT","end":"Sat, 28 Nov 2026 00:10:13 GMT"},"fingerprint":{"sha1":"10:B4:41:CD:D1:DD:DE:CD:D3:1A:E5:07:72:4C:57:04:9E:9B:41:4C","sha256":"BA:86:E6:D4:08:85:B3:D7:35:BE:BA:C1:C0:CB:9F:D4:89:EA:E0:00:B3:46:B6:E7:D1:67:D6:AC:4F:EC:A6:4B"}}},"request":{"raw":"GET /echo2-ress/echo2.0123967f3a6894feb95143321532fdcf6.png HTTP/1.1\r\nHost: cdn.tetmksells.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 14 Oct 2026 20:00:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 162068\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACFDF55AFAD5B3636BC4DC1\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"8F3CF4CCA6618485BFC0D70F71EAB0BE\"\r\nLast-Modified: Sun, 31 May 2026 00:33:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5290807686999568161\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=123967f3a6894feb95143321532fdcf6.png\r\nCache-Control: no-cache\r\nContent-MD5: jzz0zKZhhIW/wNcPceqwvg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":162068,"size_decoded":162647,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"8f3cf4cca6618485bfc0d70f71eab0be","sha1":"7a3c78bdf8df34d7dc23331548edc90fee6658f9","sha256":"b0848d7b6ab1d64fd4d8da6dda8989dd49a66d74eda046a58499be1fe08b1b10","sha512":"d0b82bcbd7bd44784e542ab70e3c0b1968e5043c99c1e5b48476b8422bf7d0e46280554b8ccf08c4fd0aea390ebca7c5b5a9b0c4c444cf1c82e26a40d50b1b13","ssdeep":"3072:eRLmkoJrPFo6hak2IKmys4O4qQrGBq3gewZY/63mtWNDyruBy7P/:eptoJrNoA3KmbD5Q60pdcNguByj","tlshash":"eef3f1bbd9616136dbe55fb013aa16d0c4ac69edae3f71015bd63e0b322abdc3044909","first_seen":"2026-10-14T20:07:41.527007Z","last_seen":"2026-10-14T20:33:03.17891Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1983,"timings":{"blocked":0,"dns":91,"connect":266,"send":0,"wait":272,"receive":549,"ssl":805},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.251","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:21.834Z","timestamp":1792008021834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=32768-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Wed, 14 Oct 2026 20:00:21 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 11917951\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACFDF5557675838339B07A2\r\nContent-Range: bytes 32768-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 17\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11917951,"size_decoded":11918525,"mime_type":"video/mp4","magic":"data","md5":"336b475b5feb8c45feaa1f6151ae1201","sha1":"a94cd3ae740eab4075b3acfe742d44357e0868f4","sha256":"adf808a5dfc9fde4019344950b3fd6f8465f32a1bdb92451054eb909002e6eb1","sha512":"75cbf6c183758551073053c4e601fbd27490971d3ca2914676cd6faa3f1f7d04aaf36392a610b85c3c272fef2707bf815c9008bb69ea1d8d82e939e94b60be58","ssdeep":"24576:hGyUAPnCOynr+umg0ohwbHgSdX1o2QPngmOEc4eBnhsm:UfTOySuHwbgM1uXVtm","tlshash":"c425337a6bc6109df0e42a0c827f2147b5059250c14ca3c40ceb9b66f97fdc7aa76d9e","first_seen":"2026-05-12T04:13:33.083596Z","last_seen":"2026-10-14T20:33:03.214505Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1873,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":1673,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:27.877Z","timestamp":1792008027877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:28 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Bi5YYijlKwskrz%2Fw7JwQU%2BSRa2CIvvguzdaoe%2BRPDdxzp8E3dORaMzj78njm3O6P2KoJT0gCbzCi4rdyVN8mBZRvq2UU9dIbrCGnJSCltRK5K1wcLIWR7L8trEzMuA8moBEIj0%3D\"}]}\r\ncf-ray: a4a92b9e395056b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":989,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:36.917Z","timestamp":1792008036917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:37 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voky0%2FfHieIc2EK%2BaAEhvEbUD%2FdmfOXK5EByJGVtCma4NWd0PH1YXBjQr3dUkzq2HUM%2BIlpnr7ey38XV6KW1xH9SvpopCZ5OOVoL3CfcmACnvhhylG4O3koKYnhTfqAcsnhJcjE%3D\"}]}\r\ncf-ray: a4a92bd6b89656b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":991,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:42.310Z","timestamp":1792008042310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:42 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FsSlI48CX0GoW5BL6L68DRLhSkAYPYapNqPGWLCt7LzwL8GP4E0KrRisN%2Bv4Ug4m%2B9%2BMf92iMv%2BILIwYBltivcs7aGKFhxRMjK8yKEzEZ5quioEpEYjVYpwqhzityY%2BVLVFsik%3D\"}]}\r\ncf-ray: a4a92bf86ffd56b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":995,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/avue/2.9.5/index.css","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.327Z","timestamp":1792008015327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/avue/2.9.5/index.css HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-153f9\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FeweOff37MF4loElKezLOJ%2BvhWTYQr0s3wOJq3NqwkFz29De%2BVhLBTEQOjh7%2FSoDhnP1cr0IZrQlGcUGj16eAktkr2EaDGziLfIxGy4x3GX8fQ0e2DFdD9YLK3M6\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a92b4fc8ba5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87033,"size_decoded":13953,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f85e11dcb08e7df97a595b462fc1e5fd","sha1":"4a21a20075980f155f0880ff27c3681413bf91a4","sha256":"0d6f8a0ccc1a2588ea5b922811dc52facc493898321a9ab48f9d4f469db5ccab","sha512":"5a944b594ffb9ac17ab736c56f04c12db40e3371b5fb01da19ab6bb421eeb12788161552a5281c4e1e3e5e523de204a9d4bd8c0ca9b3295bdae4a4875f4a5a7f","ssdeep":"1536:3ZpTJrrdtEOddi1H0jsamI897x9RUEAhgFRJgQwwCvpyR0ol1vk27rnIRf:JpTJrPEOdddAamr97x9RUEAhgFRJgQwN","tlshash":"918340625e7b0c09e80add542bd8177d37282053880ad9fb7ef931484f8679d47a2f8d","first_seen":"2025-07-19T06:38:51.487767Z","last_seen":"2026-10-14T20:33:03.194415Z","times_seen":66,"resource_available":true,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:17.701Z","timestamp":1792008017701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mv8jazoc-n1gizcl3\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uj6qaG2c9HNhFmF65FbDMlmvPqCxU6S6Y7cx211hDThA5DpTzCyp6lZ65JUkvqGz3akbolKDKxZyix8aF7kHG75ZIA6j59uMV9UBTi1Fxip0e3LrB6QowfxK%2BuUuEDugZT%2FMuMI%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b64b93a56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22766,"size_decoded":3948,"mime_type":"application/json","magic":"JSON text data","md5":"ae5008db4a30d4b1726de0bba9ab0fa9","sha1":"d81d89b504ff727e1549bb1ae395e851ba2705e3","sha256":"b54512e8a6973332ac29164f8b8346bebde6004d954523547961f18cbb49b8f3","sha512":"69381ff8edc624d0dcac39a0c8b2cdd6f26e278d415718ec1501ef6b123e574487c1bb747e9298488e0b12168ff4c59108202276819b068027cf2e43a07ab15a","ssdeep":"192:mpXE+tXUGSRXjHuXejYX73P1Xi3cQL6Xk6RX0ww6XhY5X9/SgICQcgu6wXgdS5wE:R9GgleQ3jjgaBNz","tlshash":"55a25495222c64bdc97f90d11eaf391295dc322fdcc98e1ad6ce4d9c8ee5ab4150bf02","first_seen":"2026-10-14T20:07:41.532933Z","last_seen":"2026-10-14T20:07:41.532933Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3474,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:28.803Z","timestamp":1792008028803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:29 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfFNfBhFhR91o4bSQoZOkzq3bK%2F7A3bbzWM5xC8diQ95%2FRt45UA2%2FoH0IlVNp7w7pCDYUl5EowPtY7sGod53%2FV9r4mnz3Ql3TaSoh6DV6D%2BFPEZHqTSNRd3DCdOPihZKy2tU6CI%3D\"}]}\r\ncf-ray: a4a92ba40b0556b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":993,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:37.293Z","timestamp":1792008037293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:37 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2dg0VSQ%2BqYviBN6hCN9e9NOkoQlZZ0QpoZdLyjQB0AKCVY38ET3Mh7Q1McxrfrSYnEaYSuyAwDoGPHj0L5PhgCkGLr4hVYn9XhGm%2FiFAYY5TgScE3RXfXpLIcxPAD5maV%2BQKTA%3D\"}]}\r\ncf-ray: a4a92bd9195256b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":975,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:38.822Z","timestamp":1792008038822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:39 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bE3P4ueyL21jlbDwjTCiChvRnsSkGfPaZ7ZNDPbhG2%2Fads89Cb5dS9WwyFHS7d06DaaCVWX3%2FNEpfyvU70kEogPLqG18yO9i0JHlBKurtjKJywVhDhNg3rt1kWMTvNJwiEu%2FAbo%3D\"}]}\r\ncf-ray: a4a92be29b6156b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":989,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/a58ddc5d6b8a4fc390d9026ea3a0f9ba.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.989Z","timestamp":1792008019989,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/a58ddc5d6b8a4fc390d9026ea3a0f9ba.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/eurusd.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.270Z","timestamp":1792008022270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/eurusd.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-13ae\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnev1qejpVfEvYaYQ%2ByEeOq9w2hisb0z4EoEevdgN%2FBKQ5onTKTiG57g8iQSMs%2FvxyUESZ9mNlbWfsvuDDYSRD5HeRZLszTql3LC0a8Rb29Oz1SuUscT9ODznwpx\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b2c5b5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5038,"size_decoded":5836,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"3fba2e1bf30e1c7825fd6961f6fae27e","sha1":"33d22f34b057ce62f97e9cdf8fc0ca7de93ac371","sha256":"7f54a9d808fa97d250aba01cc9c468584da9ffcc8f6726863ab3e1e4810107f1","sha512":"6520a93a8bd3c54240c2a075a627cac9b9fb762d2cac21388e88bafbfc90ceebe1732fbb5ce05c529f29d582e7c3a852af6640b8c3c8b727570be1720b717db4","ssdeep":"96:EpdsuW/JbY9ODr+CRig3IaiqdRewn/mtL43TxYxOEqwLSrPxU510Lg7r:8s/hY90Db3tRewn4yTxBwLSzxU51/","tlshash":"72a15ef535d344ede9b28be76cfc81408939a3b70e55b268cb54b1d06385a109f28fa7","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-10-14T20:33:03.094138Z","times_seen":29,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/css/chunk-vendors.b57e4bfb.css","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.337Z","timestamp":1792008015337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/css/chunk-vendors.b57e4bfb.css HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-49e\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWnxDUzL%2F%2FBUCONhS1dRHcENKbcklvGpJek44aQ%2Fm5mZ6aP%2BNoXgrs%2FgaYeMIO0ROcQpK3WyR2p9CK1LKq2jqEHr%2FnnqSh%2FdBoPUXR7hWxQ0VCthejZMRmhgWsVF\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a4a92b4fd8bf5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":1210,"mime_type":"text/css","magic":"ASCII text, with very long lines (1182), with no line terminators","md5":"bfb572ddf961ce1e5d366017ddcf75dc","sha1":"5581fb5a4ba4645e0c7a08788b80c8f9adea0321","sha256":"10092d48c11ed6efd7474aa904ac1d89d6ad919b01efcc718fbb93715a92d87a","sha512":"f088f406fd3511782ff0fc2dbfba3d2adab4e676fafbba20235ffcb845b6bc275cbc08fa588251b3a317ec35a7d7c6d663b05531d89748bdcf6cb75af298795b","ssdeep":"","tlshash":"c221ab32cc900566a2276e07b6ce0a9a03aac602913bc1dd7f557519c386b6c1cdaf8b","first_seen":"2023-06-15T19:02:17Z","last_seen":"2026-10-14T20:33:03.063509Z","times_seen":387,"resource_available":true,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":891,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE\u0026status=0\u0026pageSize=1\u0026pageNum=1","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.979Z","timestamp":1792008019979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"POST /api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE\u0026status=0\u0026pageSize=1\u0026pageNum=1 HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mv8jazoc-n1gizcl3\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:20 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E35KEBqq9DguTToMtYptGR5hkhtRR2eZ5JdFKlr3OvY8jhalW%2FpBrJnNezOCwxwiTnz%2FzWWdkrCNCyGyZGPddALv3TLvkTDZ2YrIAiAaaJgAZqDcr63UZLXJp8GzcVuQZa7Yh1c%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b6eac5c56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":1271,"mime_type":"application/json","magic":"JSON text data","md5":"6b5455d6c8a65540d7b8c3cdd9967833","sha1":"bc840e0609f9ac874294a70777a4ef8ce7fc7779","sha256":"2c66e7713fb8036ca80b722453347a72104034597cb0110337f78bf23fa6c766","sha512":"213709d730d7dfcbf7563ce22b4e294978243e693da2bb07bf701c0551c0350893d84214190552dd52ac70843350d7e5ce282d8931fdc69c37810405de6065bd","ssdeep":"","tlshash":"f8f08b4f16fcde391c4601c701cd7cc9929e1283d6949e34975bdf2c86f14ba170a944","first_seen":"2026-10-14T20:07:41.538716Z","last_seen":"2026-10-14T20:33:03.183586Z","times_seen":2,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/usdjpy.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.304Z","timestamp":1792008022304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/usdjpy.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-1024\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8eTrN4cjEOMdLfNd2%2BG2RJXVktXs%2FeYF7T8O3bXLkOOvSS8AfooovAJvcDwpBsr2ynOTKqRBsT0TemlAXCI1pUuGD6IQr%2Fuhkr0T3mGoB6pfuUwh%2F68SnXBmBal1\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b6c635693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4132,"size_decoded":4927,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"46c9b63c0d6090a4b49cde0b6776a158","sha1":"4cabbbcd21455ab7688d0624589eac165e698403","sha256":"8bd2097f6bc3eec42fa93d515e7e8ca5426234322bd78692cbc668daea545f05","sha512":"47a6e692a4d2132db588d16c32116a26b27d888a32198ab5624ab46c8af0c4730c205a6bcc3912704493ad04a293fe5187105189de8d0d4e6ff5b83e23cd06a9","ssdeep":"96:IYEYW7qLzoPqtYxE0opyEDU/FU5Tm4sHikpfrM:3EYloPqOxcpf40Tm/ZpzM","tlshash":"c8817eb5a3300a71cb25a275ee27275ec563b61540651e253b5f790f650222e7033bff","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-10-14T20:33:03.202184Z","times_seen":31,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":921,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/market/kline","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:24.564Z","timestamp":1792008024564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/market/kline HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:24 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnqNpqvmf66u8A9cxSPvTUVTv55JAhJ2QeQWH2sypabmhgyjdATOYQxqTkNMehFIIiaGMO4cZkfLbJthvm11d3gGNI2fcR0LCjdChxxV4yHoTz4WOUqoGc2125NkZG4zpZ58rbU%3D\"}]}\r\ncf-ray: a4a92b898b6456b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":983,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/pc/cdn/vuex/3.1.1/vuex.min.js","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:15.343Z","timestamp":1792008015343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /pc/cdn/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Oct 2026 20:51:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd4841-2d85\"\r\nexpires: Thu, 15 Oct 2026 08:00:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOo8YMuW57Es16gofhEwhvt6eESannnfl%2F7HO66XKTSX2Dg%2FQPlK4ZOJKTMhug9xgBmNE4uLKmIl0RIFKyk4xgvuw0sX4tz0IOUNFfkkjcUm89MyRuRJ%2BiMFz6I2\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a92b4fe8c45693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11653,"size_decoded":4042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11593)","md5":"ccce53cbb3813a63f1420eba489574af","sha1":"94ac9c787b2b96236356286c44350260c9f08a33","sha256":"1610512a47faf745fe96ac631be8ea3ea50a222fe7d7cca691f7ff8194b934bc","sha512":"78a2cf9dd160d4a451c1536de4d0037330d8ed11d07f0edaa427de7131a190af3c86d1a3f5bd858cac14f16ca70f78b2dc4bbe0124f7d3a2a4cce8872b95b8bd","ssdeep":"192:ViDaQv4w9nWp4UvouC3Dqs/778IG0zqLVFcu8XCnrdVpVAQflmGcXg3H8VnbZqlp:VeJgqnWp4kYj78p16CrdKMQ0CbMB+a4+","tlshash":"6a32cb9a73e1762aca57b0b0ac5f9c08f275a9dc1686400c6a4dc0f99c754bccb7ed9c","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-10-14T20:33:03.182366Z","times_seen":344,"resource_available":true,"data":null}},"time_used":983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/0c8c12cc9884401aba4d11d362bf9974.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:19.992Z","timestamp":1792008019992,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/0c8c12cc9884401aba4d11d362bf9974.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtcefx.com/resource/images/coins/trx.png","fqdn":"gtcefx.com","domain":"gtcefx.com","tld":"com"},"ip":{"addr":"104.21.92.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:22.269Z","timestamp":1792008022269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcefx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 19:36:42 GMT","end":"Wed, 25 Nov 2026 20:36:30 GMT"},"fingerprint":{"sha1":"EF:68:52:97:4A:3C:CC:2E:CC:F1:CD:A2:BC:F9:84:10:30:8F:F6:37","sha256":"08:28:82:68:DB:50:B1:7D:4B:89:7F:76:89:8D:88:27:B5:3F:A3:93:49:87:99:56:23:13:9F:31:AE:83:B1:B2"}}},"request":{"raw":"GET /resource/images/coins/trx.png HTTP/1.1\r\nHost: gtcefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtcefx.com/pc/\r\nCookie: app_device_id=d-mv8jazoc-n1gizcl3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"app_device_id","value":"d-mv8jazoc-n1gizcl3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 20:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acd3ee5-6e71\"\r\nexpires: Fri, 13 Nov 2026 20:00:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B20cMjfxY30QgXaiACcR%2FyUhNJKE2PWQc2A9rZPQlMpkvJp0BBZhM8OSTUCyKkndzY%2B3Gw%2FmL0gexxsnIv94N8EGDGcX4fGyBefsnEHE7UcyG5POHXm%2BduefHR3N\"}]}\r\npriority: u=4,i\r\ncf-ray: a4a92b7b2c5a5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28273,"size_decoded":28530,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-10-14T20:33:03.157779Z","times_seen":6552,"resource_available":false,"data":null}},"time_used":1148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1146,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcfxmq.com/api/common/getCoinList","fqdn":"webapi.gtcfxmq.com","domain":"gtcfxmq.com","tld":"com"},"ip":{"addr":"104.21.67.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtcefx.com/pc/","date":"2026-10-14T20:00:30.220Z","timestamp":1792008030220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxmq.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 16:18:09 GMT","end":"Wed, 18 Nov 2026 16:18:08 GMT"},"fingerprint":{"sha1":"E3:2C:09:65:E2:D1:34:BF:A1:48:E5:7F:57:FC:80:58:1D:11:42:3E","sha256":"8B:93:CF:39:61:D5:9F:CA:67:C3:1C:11:F5:01:A4:E8:C7:6C:93:8C:8B:58:47:7F:B1:9B:2F:FC:F5:0F:E4:68"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcfxmq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtcefx.com/\r\nOrigin: https://gtcefx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:00:30 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtcefx.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYOtTzOwbgYsrq8Rza%2FM0RwuQR4CHkvUFV0DLQb6jVAecIAZiOWLWauDnxEzJLH2%2B0Cn262UdKKwOKfSkwP90QlS%2B9NtYP1I177vVug%2Bpq6fmXlgJRmxE5YuDErVbcyalKLISGM%3D\"}]}\r\ncf-ray: a4a92bacde2056b7-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":977,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}