{"report_id":"3d78ac2c-e20f-40c9-94b4-0f21c4890de0","version":6,"status":"done","tags":[],"date":"2026-04-06T13:17:54Z","url":{"schema":"http","addr":"gshortterm.com","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"gshortterm.com/#/home","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"title":"gshortterm.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gshortterm.com","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T13:17:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.119855+0000\",\"flow_id\":258645924307797,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44484,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:17:36.582485+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44520,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.140587+0000\",\"flow_id\":285562484352132,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44520,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:17:36.582788+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44494,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.144048+0000\",\"flow_id\":507139847152567,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44494,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:17:36.582583+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44478,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.149219+0000\",\"flow_id\":703119204868764,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44478,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":906,\"bytes_toclient\":3148,\"start\":\"2026-04-06T13:17:36.582300+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44530,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.152064+0000\",\"flow_id\":885715444491481,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44530,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:17:36.582873+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44504,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.155211+0000\",\"flow_id\":1746843502437412,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44504,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:17:36.582692+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44548,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.366192+0000\",\"flow_id\":228396469631416,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44548,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:17:36.833976+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44572,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.378596+0000\",\"flow_id\":124681599367869,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44572,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":906,\"bytes_toclient\":4662,\"start\":\"2026-04-06T13:17:36.834237+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44560,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.382613+0000\",\"flow_id\":460423487863307,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44560,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:17:36.834059+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44536,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.386085+0000\",\"flow_id\":646988277266579,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44536,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:17:36.833683+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44570,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.394883+0000\",\"flow_id\":2205219592125024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44570,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:17:36.834144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:17:37Z","timestamp":1775481457,"ip_dst":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44544,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:17:37.396280+0000\",\"flow_id\":564451890739530,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44544,\"dest_ip\":\"47.79.64.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg-mahalebi.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:17:36.833866+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"gshortterm.com","ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":23,"received_data":41700101,"sent_data":11974,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-16T21:47:18.926773Z","last_seen":"2026-03-27T06:35:31.143766Z","alert_count":0,"request_count":34,"received_data":506136,"sent_data":16256,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"webapi.gshortterm.com","ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2026-04-06T13:17:58.52249Z","last_seen":"2026-04-06T13:17:58.52249Z","alert_count":0,"request_count":11,"received_data":45174,"sent_data":6355,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gshortterm.com/charting_library/charting_library.min.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-04-06T20:00:07.008477Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/#/","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5fb74ebd4066db0becfa94c22231d501","sha1":"7e88cc97839af0969145a26d000392708badab3d","sha256":"af22247a55b0eaa9e98c75f99e2fadb34ffafa8b1341cdf731d46a2310a2fd5c","sha512":"cfc282573403e92ca2dad8147e602d749c8b6a0c1433aa84add502b334fb92e858964cf93bb13349205d878354460412b7747004b01e555fda617ba80fb3032f","ssdeep":"","tlshash":"49f08bf73179c1a0e380493a18ec381ea2d631338cdc1a3ab0c4ad280eadd3c253c0a2","size":539,"data":"","first_seen":"2026-04-06T13:18:05.363173Z","last_seen":"2026-04-06T13:18:05.363173Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/CommonMethod.8eedd4a3.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"bed6f735ee3eeebb47b4d8938a275fa3","sha1":"77440fd7e87c279f79e1421cc2138f79a5e94973","sha256":"1f55b9f50d93897c73f7e850794e523e52d16f9034118c4b969229a65c4a19d1","sha512":"2949028a739149ccb599fe862771e0f48516fcacd7f754268f2d651956529a35c3febae718841b396ff465c8916fee3bc2dc752c8f56efd31c9ef034c63af125","ssdeep":"","tlshash":"4a11ccd0e48dfb290368dba5a2248033f25d58b51e288368c0f95eb57b2d449b79ea30","size":871,"data":"","first_seen":"2025-06-07T20:38:42.155028Z","last_seen":"2026-04-06T13:40:47.834334Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/index.3224b3d7.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"386c9d3df478d699019456b980577983","sha1":"bb65dc6b44522afcc5105b836a7a8b046c85d766","sha256":"ec967b1b86761f0e814cd692f73e4a4cc71134a9f08aedb49d7e8cb326501b10","sha512":"06654c5e9649f7ad1b2d92d5bfaa3eb554ee2d736897f87d08d05764aa923397d25bd7e3a0d67c91c9e012fa4b3cf27ba89376265847a5274a517208aa004b78","ssdeep":"768:+h6gUT+OS1wdB+8ro6k7y1khsjNc5nnIBVzJD0DdcWerxE:C60Fb","tlshash":"63c261adf51e8a78f1f79851141c04463a4cbfd381508653b6fc3e15aba2ebc278d72a","size":27531,"data":"","first_seen":"2025-06-07T20:38:42.110256Z","last_seen":"2026-04-06T13:40:47.804656Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/core.esm.6acae16e.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","size":40515,"data":"","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-04-06T13:42:54.579428Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/en.7a364be2.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0cbe4582c8a7d4a25392a41ff7d5ee3","sha1":"ed18099318fbc3da7172283d7697609fe4924a2f","sha256":"9b20c6f5d74de69c7684d8387e85375c596b8ed7366cde95b32b09563c5b2ad0","sha512":"7399195eab6f0784ce9b3e6adb7e549d4272d5dccc1fa1f2c335fb63011644bf070da98f850e09f20f071e06d0b531b16eb66f340b83410abf64968f5f7cd129","ssdeep":"768:U9tZcEw/od6rUOdAFsifnAMC2rAaAMFVoP6+6sPnhmDLqAIo7hspmwO6fpk7aOjD:hposUOdebE2rdFVjsPhOsujyWXjC8F","tlshash":"7343298e7e0a94aa09f3937679ce1f5020fa05c18265841f4bfcc5fc53e2b5a6367728","size":55257,"data":"","first_seen":"2026-04-06T13:18:05.333105Z","last_seen":"2026-04-06T13:18:05.333105Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"65187b5916d4274f234d738033fe3142","sha1":"f3bef32e4b39843f361cc39252f350d2504a8e61","sha256":"5ec6130214b7536ebc01bb030519216b3bfabee883cc3857a55014399e3d3ac9","sha512":"a4443cf2b4b3726c59f96b3dacac89b36bd486e37eb420853b8124d5b6c1a29a6f6663b633622ce91926235c83da7228c9ae6c9c90121f71958d63a32aa79d4b","ssdeep":"","tlshash":"3f31cc0e2de0a176605a516e1737e26bb210003b6501f4a8bcdd8adc0f13fac9a55dce","size":1771,"data":"","first_seen":"2026-04-06T13:18:05.364344Z","last_seen":"2026-04-06T13:18:05.364344Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b1d15130e24d2d2ac4f8a542c64e6f3","sha1":"5a8185ec47925eb372929d9dda66b89f552a6f5d","sha256":"11554f26422936407c1599c96beb7dd3552f2817fe74adaa4e530dcb938e0351","sha512":"cbf5398fe863b25156f48e606a3dbade6b1270df78bb648302094e179116ab82d3ed494fc433878e58db7601b3c810c4d1203b3a3e3a6ed12cbb85924befa711","ssdeep":"","tlshash":"b311abfe291aa02d6303804e976b7801642650b9001a184177ccda9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2025-06-07T20:38:42.266028Z","last_seen":"2026-04-06T13:40:47.860742Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4447b0051df692a7818b8f797db3fac8","sha1":"c519e7f51400bc00d4f7e979b0158c84f96f3653","sha256":"50c41215fcf3d75ebbc7805a238d541d57800010b5731a83f881e16403aa6664","sha512":"b3187a953381dfee3442e8207815ca7cf525c3154abd82c9dbf53a9426565cac4f87189d1b05e286190a5527e58cd40cd4c3cf961e9ff9a441521682f7370f16","ssdeep":"","tlshash":"6f116f4e51f54071417b763ceb5fa384353200d7681cae117e0e8f845f2863d46e6ade","size":990,"data":"","first_seen":"2026-04-06T13:18:05.36877Z","last_seen":"2026-04-06T13:18:05.36877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"gshortterm.com/assets/CommonMethod.8eedd4a3.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/CommonMethod.8eedd4a3.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gshortterm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:35 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 871\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\netag: \"6626992a-367\"\r\nexpires: Tue, 07 Apr 2026 01:17:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"bed6f735ee3eeebb47b4d8938a275fa3","sha1":"77440fd7e87c279f79e1421cc2138f79a5e94973","sha256":"1f55b9f50d93897c73f7e850794e523e52d16f9034118c4b969229a65c4a19d1","sha512":"2949028a739149ccb599fe862771e0f48516fcacd7f754268f2d651956529a35c3febae718841b396ff465c8916fee3bc2dc752c8f56efd31c9ef034c63af125","ssdeep":"","tlshash":"4a11ccd0e48dfb290368dba5a2248033f25d58b51e288368c0f95eb57b2d449b79ea30","first_seen":"2025-06-07T20:38:42.155028Z","last_seen":"2026-04-06T13:40:47.834334Z","times_seen":5,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/2a22aef930eb419e93dfe0414fed47d9.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/2a22aef930eb419e93dfe0414fed47d9.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 161219\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B271C390C3343713CE8B\r\nAccept-Ranges: bytes\r\nETag: \"787B5D6EF7D9CA66C8AA36CD148BAA41\"\r\nLast-Modified: Tue, 07 Jan 2025 14:07:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7974843867096006400\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eHtdbvfZymbIqjbNFIuqQQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":161219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"787b5d6ef7d9ca66c8aa36cd148baa41","sha1":"7a8f6c13b7e1f2bab939cf8e376d57f3c69e8992","sha256":"15d01e56d732870842f63bdac21d01899e79b36235ab72c6e01c1211481df4d7","sha512":"8beafddfa3b0d67d9cba32155fb2a1d39a0e073c22e33cdb5bcb222e76b66cc2119a7a8cb485fd8a12b68d165f057cb15bf58ec8a73b4a955506252e09dd00be","ssdeep":"3072:JDGrno/HXCrNfeiPb6a8H0in6Lu+42Dc4ta/mJz5:EbeCp/V8UinMqlea8d","tlshash":"84f312fbca212b86c4b5f7341dbd0b267fb5c52357a0ca9ed63820385f46a76ca02c15","first_seen":"2026-04-06T13:18:05.300748Z","last_seen":"2026-04-06T13:18:05.300748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2593,"timings":{"blocked":845,"dns":30,"connect":267,"send":0,"wait":297,"receive":615,"ssl":537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/4dc03f0a7a6c467da7fb27f1ab7d7591.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/4dc03f0a7a6c467da7fb27f1ab7d7591.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1282\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2726AFD363931682222\r\nAccept-Ranges: bytes\r\nETag: \"80B6B4083202A89635A2683DF9ED1391\"\r\nLast-Modified: Mon, 18 Nov 2024 11:48:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11393607898801402555\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gLa0CDICqJY1omg9+e0TkQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 534, 4-bit colormap, non-interlaced","md5":"80b6b4083202a89635a2683df9ed1391","sha1":"513d02823ca272d9036ad96e83edbe912f97c0b1","sha256":"d67da3a266c8ec310cba5d68d82d0571df9074070f6f45eb6393c7c9f5c9d2bb","sha512":"fd0352898f3b73f8055351655380075857d86edb17306abefe7c01ce9325f4e37a5aaccd7a87d54210a39604957fd9bcdee1cb23e8aa106dba32c14d01d5013b","ssdeep":"","tlshash":"dc2155d18b7380209f07ee362020c301ef708a380835c54cbb5fd40b2b3938d43c2680","first_seen":"2026-04-06T13:18:05.302021Z","last_seen":"2026-04-06T13:18:05.302021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2491,"timings":{"blocked":2015,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.0a119950ef2af4521b3a3943cfc49de98.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a119950ef2af4521b3a3943cfc49de98.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 1687\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2728B904439345A1E5C\r\nAccept-Ranges: bytes\r\nETag: \"D1BDAE92B669EDDF77DCB8DC87B9A402\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7745069834545942300\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0b2ukrZp7d933Ljch7mkAg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"d1bdae92b669eddf77dcb8dc87b9a402","sha1":"a8fefdabe0b6945c63a284067d21f09a0bbe2f0b","sha256":"8bf7a2722b0ad91f18d12a4a22c027bb84a7d48b986beffcfcd72e90c5fffd3d","sha512":"99032af46aaaf87ec06020c80f4082d6469ca405b893440ce2f367e24ebd31d23ce8585d442e3f795e07202cdc6af5db4e769857c452c92575c5c8d34d31d736","ssdeep":"","tlshash":"04311a9f286288ecbf8f495be1bf42a51830b0b49034d4bdcc2d549bfac9c5b0649dc5","first_seen":"2025-05-29T23:41:24.322973Z","last_seen":"2026-04-06T13:18:05.303086Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2019,"timings":{"blocked":1733,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/50da1a22f508418186a45973195fa1e3.jpeg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/50da1a22f508418186a45973195fa1e3.jpeg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8965\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B27293A7E9303070B020\r\nAccept-Ranges: bytes\r\nETag: \"387C774FCB46F054AD9A48308412BE33\"\r\nLast-Modified: Mon, 18 Nov 2024 11:48:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1249056113273339398\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OHx3T8tG8FStmkgwhBK+Mw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8965,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 287x176, components 3","md5":"387c774fcb46f054ad9a48308412be33","sha1":"750357be03d4ad8e7c4e868112972d7e3d85b0a6","sha256":"25f2a3358fc6bd1b1afe5739f3f907f6dce2fbfb2fd2a9e051a5836b56671ccd","sha512":"02460c4b5f782b77aabaf6b4dc9c832119bda65ae04feb31a108ba4a655de008d5428bb819fc3aed872f87730e19df5c6bd5692b7c0e1d5b2a7f0ba2c45dba85","ssdeep":"192:ltHUkT1ZGliyIgA6iKrbLjXPeQU9eR/a7WCBh/RXZ:lNLpZvyIAiKvvXGb9X7fn5p","tlshash":"e1024b922ca1b29eff2bc17361bfe771f108463872b5d0917c0e11d24ea669a654cb5c","first_seen":"2026-04-06T13:18:05.304531Z","last_seen":"2026-04-06T13:18:05.304531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2491,"timings":{"blocked":2014,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/bitcoin.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bitcoin.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B27193A7E930302BAF20\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-07T05:05:10.791736Z","times_seen":19946,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":1104,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/ethereum.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ethereum.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2716AFD363931632122\r\nAccept-Ranges: bytes\r\nETag: \"12D9722461759CEFFF02D9076A3D2718\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9445008190181339835\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EtlyJGF1nO//AtkHaj0nGA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-06T13:54:01.030936Z","times_seen":363,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":1116,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/litecoin.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/litecoin.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B271CE63A83433EC527A\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-04-06T13:54:01.057428Z","times_seen":369,"resource_available":false,"data":null}},"time_used":1696,"timings":{"blocked":1115,"dns":0,"connect":0,"send":0,"wait":580,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:37.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://gshortterm.com/\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T07:11:48.946741Z","times_seen":13452227,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/common/getMt5Amount?coin=xag","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 3\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xag"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ad0f811d4771030d7021e04d3b5f843","sha1":"55ac02e8c04049db7ab776dec27a2b8899106848","sha256":"b799374eb6e26f2fb69e3a0764f32f4f2489a326d0c9de74021a1cf034416b27","sha512":"5fb29972f07169ebe0bc430c566ffbc6a0bb5a0203f723a0abd861c78ad4db76f05171595ecfa55c25eec28d24ef8b9874c8f5b1cccea2d9d247206e511f858a","ssdeep":"","tlshash":"759002595c1c8282b8c310a6954a2219003c3160262492484c59512590cc1a72044858","first_seen":"2026-04-06T13:18:05.307887Z","last_seen":"2026-04-06T13:18:05.307887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/index.1f16077c.css","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:32.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/index.1f16077c.css HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 12 Jan 2025 11:12:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6783a3a0-84be4\"\r\nexpires: Tue, 07 Apr 2026 01:17:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":543716,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2f860378232e8bcc86c4194aa1b3c876","sha1":"f04c837bb96e482e3fce7fcaa95a40149b72ae62","sha256":"6a756c4a183636ea34ff21c4897a8420eb693ce3ebb60c1bb443d82e5d781423","sha512":"4cacf711a41d216175086a8360af35c26ef04321ec60be9ab5313da974e200f640dd6be406760de077c9298bcc7a6e35d0682b92246a6678752feb51ca44efdd","ssdeep":"6144:UbtitXT+XK4PjDEDSHmWuwK04MuobXSNA/mylsaFiAFPQ:yDEVyhBFY","tlshash":"25c4c655e753513b2e17f63d7bc5e9c8bb28ea51dd12cba5f240a00885c3af502a3d2b","first_seen":"2026-04-06T13:18:05.308893Z","last_seen":"2026-04-06T13:18:05.308893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/platform/gshortterm.com/config.js?1775481455266","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /platform/gshortterm.com/config.js?1775481455266 HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:35 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 513\r\nlast-modified: Mon, 30 Mar 2026 18:42:28 GMT\r\netag: \"69cac414-201\"\r\nexpires: Tue, 07 Apr 2026 01:17:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2ad1427ddaf04836855bc337f45ec3ce","sha1":"6196909413049fccc0ded80b59c3fe746e11fc96","sha256":"0f9c7dda8d2323814605dfdc00262f228c889063cd5dee1bb2ed246699e11469","sha512":"7fe253bef059608a9afa12c7e7875cea9851e7c1d5cdf8eb536740db4e310df722428d7ee11abc6afaeff7e6ff7330bdad373d036ce978dc460296d0a861d1b9","ssdeep":"","tlshash":"e7f02bf73139c190e340493a18ec781ea6d631238cdd163ab4946d181eadd7c5578062","first_seen":"2026-04-06T13:18:05.309729Z","last_seen":"2026-04-06T13:18:05.309729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/index.7cfffdce.css","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/index.7cfffdce.css HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992a-36af\"\r\nexpires: Tue, 07 Apr 2026 01:17:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13999,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13998)","md5":"5cca1c1f4f5defc4049d05ffd25f1d72","sha1":"db3cd5816a4048633c122aa3a1db39ed2c3eef53","sha256":"7cfffdce4ee3ba4f16f06b248469aea9b054f445aed558ec47e64c2c267369c6","sha512":"140bfa81d1cf255b331b2c9cb9ebb7d56610c015c862c62489b8d676243544b76ab7ee2e96bc0135d13be4f870a2a5900d695939536af903e9b53d317d0c9f34","ssdeep":"192:91YQOXMuhTEwtEoF8rRMbNThu1vwbW62lGvWlXaYZdzgDIsCQo:9yMuhTEIxF+RMxCQCD","tlshash":"8e527554b29da5367837e4092da89b4e7041ff5384036399eccaa97ecdc79b32738750","first_seen":"2026-02-03T20:06:39.496657Z","last_seen":"2026-04-06T13:40:47.808954Z","times_seen":4,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/ripple.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ripple.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B271C78BAF3635F550AF\r\nAccept-Ranges: bytes\r\nETag: \"674B0999F6083084A2A4B1D8B20F3BC1\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Z0sJmfYIMISipLHYsg87wQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-06T13:54:01.068283Z","times_seen":389,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":1115,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/GBPUSD.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/GBPUSD.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 3112\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B273C390C334373DD08B\r\nAccept-Ranges: bytes\r\nETag: \"843D07EAAB851BDEC4ED3D144F35F33A\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6453509990731668063\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hD0H6quFG97E7T0UTzXzOg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"843d07eaab851bdec4ed3d144f35f33a","sha1":"35bf1e6a8bbe10a5e416884698b86384202bdb91","sha256":"305eb71263b402ff611596f6239bdf1599029ff35e9e9f8c6ec1411f9d3940ca","sha512":"aac68674fc307a73f0791b6d64672f564673fae3479f1998f472efc1affa29d40af4afe92a33832e4a21af4ebaf9f247dd920e5655acce91b86c1571ed2a3bf6","ssdeep":"","tlshash":"49515d724b3809590d32e0e12129e7274c1379aeef8fae60dd9bde7c58a463d6870f45","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-04-06T13:18:05.314793Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2711,"timings":{"blocked":2440,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/lever.jpeg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/lever.jpeg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5326\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B27293A7E9303000B020\r\nAccept-Ranges: bytes\r\nETag: \"C58F4C5B071E5912836E45C01AFA9E03\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15115948942539943788\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xY9MWwceWRKDbkXAGvqeAw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"c58f4c5b071e5912836e45c01afa9e03","sha1":"b6f7e2a28f9041fac42acd69b8713fd811ea9ea5","sha256":"ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3","sha512":"d61e62b7171e37d01a1453feaf4685f922dad6afe642d687afd248eda211886d2b75d3afe06dbe9fc5bcd483a28cfe3f4541f0a1af9325c0a3c0163bb74a29dc","ssdeep":"96:emHUsasfObCPgp0gc3oj3OSj6rTvdv6OzmrzobXdslboM65PHMZ1:uJO1Yp0gtjhjIvdv6OKrzobN465MD","tlshash":"c3b16d72b762d9d8c519e1f1da024ba2600d6e7b01bf9cc95f6d1d9119f4081cb813cc","first_seen":"2024-06-11T12:53:28Z","last_seen":"2026-04-06T13:46:28.115439Z","times_seen":129,"resource_available":false,"data":null}},"time_used":1969,"timings":{"blocked":1683,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/EURUSD.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/EURUSD.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 2835\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B272C78BAF36351D52AF\r\nAccept-Ranges: bytes\r\nETag: \"78BF6E0671DFB4048C87694131DAF24D\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2966404084925446468\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eL9uBnHftASMh2lBMdryTQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"78bf6e0671dfb4048c87694131daf24d","sha1":"fabf49a06b07abd06cacfe254817aac8f4a23ab4","sha256":"aff93dd4920d4124d5ac53008b3d6979a16f3548dc13b2efc32a51a7d95c56de","sha512":"75c574097fd4f559ef873172d448e9d312475cd03c243fb9a113117d1b15700c9e0fd20c97e908a408a09ac69c552aedc4d95e8614c6f6f8619eea6c80db7b19","ssdeep":"","tlshash":"97513e76340ab8e5e4cf3776f4d536d1a05cacf7d65e502800469c00539178df569f9b","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-04-06T13:18:05.316633Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2444,"timings":{"blocked":2021,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/images/common/home/Selection-b.png","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/images/common/home/Selection-b.png HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Apr 2024 17:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992c-1ad1\"\r\nexpires: Wed, 06 May 2026 13:17:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"780fc0bba0436d2e007810a0ab31b50e","sha1":"a8aeac9b0b51d65393aaea9dbeacd6c281cfcc64","sha256":"4bd0177dc9f6cfbfab5d3df02ec5bb397b1410cdaaaea2dab787e54e30a3ff3c","sha512":"98a4061779796f16b22fb27dbab9fbd2e1c13ea3aac362e9db0f1062f2f5292f568ff1eaab9ac49528922ec842c35fa16e0a80a8bd4edef1f41b5c613290f926","ssdeep":"192:IjMvFrdgXf5H6fSoOOgZPAsps7URrsphkuD5HFlJiCCF0Soa:IIvxdgXfwoBaU1sbbD5HFlJaFCa","tlshash":"1be18dc00a1d9e9aa83f7cb5089606a24790752b62d66aa65dda86ea30f9c34244c397","first_seen":"2024-08-19T17:34:46.61216Z","last_seen":"2026-04-06T13:42:54.569754Z","times_seen":75,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/images/common/home/bannerimg.png","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/images/common/home/bannerimg.png HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Apr 2024 17:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992c-2196f\"\r\nexpires: Wed, 06 May 2026 13:17:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1096 x 982, 8-bit colormap, non-interlaced","md5":"81bde0f76b8d8c587f93c31ca0118911","sha1":"d7696679f1f1278787cc6242af6a2e9a9af49ccd","sha256":"b3c59f9007ae88ab2eb802cf5b2f48e0c8fd71d96e02182af7975cf0ef29350d","sha512":"c7958c6ace2b3db1cea047c4373ff2722b43da16fc7993f748dc87d6f4ddfe0946f36c7cadd76ab9e25e7e4b316636d4a208dbb1f2623ead1441676336ca890f","ssdeep":"3072:o8xzSTATdbv2PiNXSQy48F60fv1h089EECVPYTUlki5rWx6M6vD:n8ATdD1SQy48gOv1hDCmUlFAx6MED","tlshash":"46d312d39adb5b94ce0788707341af093dae6a21fdea24514089da0f55ae3b48dc093f","first_seen":"2024-08-19T17:34:46.604947Z","last_seen":"2026-04-06T13:42:54.528405Z","times_seen":83,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/USDJPY.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/USDJPY.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 1857\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B273C78BAF36359F52AF\r\nAccept-Ranges: bytes\r\nETag: \"336AC15D6713B8F80580F04C610DEF94\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7209712669190782915\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: M2rBXWcTuPgFgPBMYQ3vlA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 43, 8-bit/color RGBA, non-interlaced","md5":"336ac15d6713b8f80580f04c610def94","sha1":"88899fda7dee40d384a264a9836f64e5817b842f","sha256":"a281cac24047602e192fefc4016bdadacded09acb6807c0a5917a9269ee1eb79","sha512":"99e2fd6f5bf33b7fc39fbe95c425862468e92a1e52bc318d0a038c4e9ed74ed916e62cddfd1082876a20d5416dc204b407a7a465792123212aab1fb087112a79","ssdeep":"","tlshash":"28312b1f954109251cc6a17b7f240670abb3e63e6389d17c2827e88e4a6b3174746faa","first_seen":"2026-04-06T13:18:05.319031Z","last_seen":"2026-04-06T13:18:05.319031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2722,"timings":{"blocked":2438,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/images/common/home/Selection-c.png","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/images/common/home/Selection-c.png HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Apr 2024 17:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992c-13e0\"\r\nexpires: Wed, 06 May 2026 13:17:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"c1e0cfa54461cfe2003359fe589984dd","sha1":"fd82904639342a643be65d67f8a24c5d16e445b8","sha256":"69e6f084038fd9c2196d3349b6be282bb366b9b47c5dfdb07b917a4956eb79fb","sha512":"dc0feff751431464fb48d538ac9dca32103da30c468e078100a2625ea616500cb026aa75a54c1450ce37539a93dad647a82a91e7bacf2f7dad9b9f4e639e73fa","ssdeep":"96:Y3l7a2ASmDfKAw8m2QCvNLPHQt2sotAi4EbsxVcgqiT56IaZ/IvEKdRh7zUt2:YFyPmO1Q2Leilb6F56Z3KRI2","tlshash":"15a18f7b6ce42c16cf86e6d90f86130c2b94c06f01586e13541eaad90f708f8329e709","first_seen":"2024-08-19T17:34:46.646268Z","last_seen":"2026-04-06T13:42:54.518124Z","times_seen":76,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.02877f2fcc3f44c6689306d8039a0d20c.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.02877f2fcc3f44c6689306d8039a0d20c.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 1522\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B271CE63A834338F527A\r\nAccept-Ranges: bytes\r\nETag: \"745AF06268B3B824AFB370ED21548403\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4938955846271090707\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dFrwYmizuCSvs3DtIVSEAw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"745af06268b3b824afb370ed21548403","sha1":"b34430638a6119980b082148e1f11290579e4e17","sha256":"1c374f14610f14efb98ea056ee0fcde364fca7e37892cfd493111580abb564c6","sha512":"1e42181e0aa4c0a975cb737a2f7114e9a7ef5f2a176eea48f5d9913efb865593b3bed35d22f733008173ecf7e3b2b0d6e82d7aee70ddf966d6c1736566855c48","ssdeep":"","tlshash":"9131d7fb9d4893ef84fb1f60179b0924d856529c1d212528459d5d33bf92c29cc1e902","first_seen":"2025-05-29T23:41:24.314069Z","last_seen":"2026-04-06T13:18:05.320733Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2024,"timings":{"blocked":869,"dns":18,"connect":282,"send":0,"wait":286,"receive":0,"ssl":564},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/fonts/DINOT-Regular.ttf","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:33.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/assets/index.1f16077c.css\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12381068\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\netag: \"6626992a-bceb8c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12381068,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-04-06T13:40:47.827003Z","times_seen":46,"resource_available":false,"data":null}},"time_used":2116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":1823,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/index.3224b3d7.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/index.3224b3d7.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/assets/index.29ebc297.js\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992a-6b8b\"\r\nexpires: Tue, 07 Apr 2026 01:17:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27531,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27530)","md5":"386c9d3df478d699019456b980577983","sha1":"bb65dc6b44522afcc5105b836a7a8b046c85d766","sha256":"ec967b1b86761f0e814cd692f73e4a4cc71134a9f08aedb49d7e8cb326501b10","sha512":"06654c5e9649f7ad1b2d92d5bfaa3eb554ee2d736897f87d08d05764aa923397d25bd7e3a0d67c91c9e012fa4b3cf27ba89376265847a5274a517208aa004b78","ssdeep":"768:+h6gUT+OS1wdB+8ro6k7y1khsjNc5nnIBVzJD0DdcWerxE:C60Fb","tlshash":"63c261adf51e8a78f1f79851141c04463a4cbfd381508653b6fc3e15aba2ebc278d72a","first_seen":"2025-06-07T20:38:42.110256Z","last_seen":"2026-04-06T13:40:47.804656Z","times_seen":4,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/common/getAllSetting","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15282,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f4390e203f945a80b62f56d187da4e2d","sha1":"2b55844f83feb2624e9a4d26b157cbb8cc4f6fbc","sha256":"5494bd69788545b8897dc9f620af0d75e1fba50cdd83f3f86832990917c421fd","sha512":"4dc5d258d24844ced8f9f4dfb2f5b21ecdf1423e1a626195c5e108d1116977644d03663f2fea78e581e01be8e8cbcee81593d0353594c659f5bfd7ce3a82e9db","ssdeep":"192:cZMYmDOSpQ+s5D+RbWc2XyeHPoc9krIMnwqpVgIzMs2sVvsjqhCiXZMN4JyO5Ziz:AcwWAs2s5MWJyO5Uy84Y3Rcu","tlshash":"0162981a3b88ccbd87e61bc758ab3e0db8cd30afe9b7d8559495ee5cc458c72058b109","first_seen":"2026-04-06T13:18:05.325559Z","last_seen":"2026-04-06T13:18:05.325559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.0ed68f6ddb2ae4f4bad26324135f723b5.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ed68f6ddb2ae4f4bad26324135f723b5.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 1721\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B271C78BAF3635A250AF\r\nAccept-Ranges: bytes\r\nETag: \"89CF5AD8C480F4A55D6925FC628F5575\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18183737992525434775\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ic9a2MSA9KVdaSX8Yo9VdQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1721,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"89cf5ad8c480f4a55d6925fc628f5575","sha1":"5be55de41d3295d8c754b7c96cda4827e77ca3c8","sha256":"0a057beabf626a17bf1613e22c6b3e157a5f053399ebe6cdbd94b0f98248cfd8","sha512":"c52a953f14b72b98ddd56027ede8d65c6f45f67f5afb478e2f425704ccab319c8af48a60fd39274752635d605e9f7cb501a7722484f98172f8b433408061da22","ssdeep":"","tlshash":"f1312b22ceac0e0936d41d39099c9e9125237d3bb0cd41f46c03068d4460c4b5c7e3bb","first_seen":"2025-05-29T23:41:24.321913Z","last_seen":"2026-04-06T13:18:05.326449Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2004,"timings":{"blocked":869,"dns":0,"connect":283,"send":0,"wait":286,"receive":0,"ssl":563},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/bluzelle.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bluzelle.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 25833\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B272CE63A83433B5537A\r\nAccept-Ranges: bytes\r\nETag: \"D00EFBBDFD298720E829AE2434E8300F\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8445431794217583994\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0A77vf0phyDoKa4kNOgwDw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d00efbbdfd298720e829ae2434e8300f","sha1":"5ce11234597ef8050d23bc55f1bf48d4a1152451","sha256":"f42a835f279c3889d4384579c4c6a3688442b7f1c8df12fd3fa4b3741ce140a7","sha512":"6d2425cd1c13c3b83701c51c2afee6c08449c491422f3613f956025e1623993c78d242d4dbeaca645f298d7fee413c9268374dfcfe0766890027eb5c796ef3b7","ssdeep":"768:3EMrF5XvEfBimA9K2mX7VDsJHCf96WOdkKCbjGO0hb:3VR5XEBimAQvGicWqCbp0","tlshash":"72c2e0aed8d8c48878afaa3179d5c071d7b5e9bee9717c2271ce843319507071c0e9b8","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-06T13:20:05.198503Z","times_seen":74,"resource_available":false,"data":null}},"time_used":1991,"timings":{"blocked":1686,"dns":0,"connect":0,"send":0,"wait":297,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/favicon.ico","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:39.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:39 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 270398\r\nlast-modified: Fri, 10 Jan 2025 11:30:10 GMT\r\netag: \"678104c2-4203e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270398,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256, 32 bits/pixel","md5":"4b0f790ec438109c03a3358aa00668ee","sha1":"676cfa07f435a838e15a7d836d6d556070ada6bf","sha256":"ea6ab12d44db5e29742eafc6645a1aa08b0bd429eca9686f69d95a8bb936fc97","sha512":"061b116814f242d6d9bd4c1c518fd5d4dbe6ec0314cd0ffb91a57ea02aa92f442548d295b157a38bbaba1e4f2f1a426a8737f69447bb608e8e212b5ab0bc4a86","ssdeep":"3072:Q8gVBuuuuuuuuuuuuuuduuuuuuuuuuuuuuuuuuuuuuuuuuuuu4jl:0VDl","tlshash":"1644fd6028391a80e48cdcf7dd2aefb626275fa7d8874c739144fb1a09b056dedd6c81","first_seen":"2026-04-06T13:18:05.331229Z","last_seen":"2026-04-06T13:18:05.331229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/common/getCoinList","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22356,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (22340), with no line terminators","md5":"99070893df58b6cd023f1cce2d3b10e9","sha1":"aaa8b72e2ab8cce505e0881f3480a1f82f8532b4","sha256":"29e90bc378ed200ae09b6ffbbc637d5c98ed30ba13fc575b1b2b04e4cde247a4","sha512":"7d091c82330088a8dfec9b1a66f50fe9373ff9e251977dd91bcbe1008cc8faa81c246eb2f1d17914ad7fe566a40af23161e7a01d7d7bf83946b845d705dee549","ssdeep":"192:1X2nmXnBXLxX+dWXkBX5INSX660XM7XDeXNfS8qgu0wXFwY7K7YezvKYf9CKFnjG:WuBAvIAGA","tlshash":"6ca23f55622894bdc57981d12ebf7d1650cc326fedc6ce2ac6cd4d9c8ee8eb1120af06","first_seen":"2026-04-06T13:18:05.332111Z","last_seen":"2026-04-06T13:18:05.332111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/common/getMt5Amount?coin=xau","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://gshortterm.com/\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T07:11:48.946741Z","times_seen":13452227,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/en.7a364be2.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/en.7a364be2.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/assets/index.29ebc297.js\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992a-d7d9\"\r\nexpires: Tue, 07 Apr 2026 01:17:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55257,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (55256)","md5":"a0cbe4582c8a7d4a25392a41ff7d5ee3","sha1":"ed18099318fbc3da7172283d7697609fe4924a2f","sha256":"9b20c6f5d74de69c7684d8387e85375c596b8ed7366cde95b32b09563c5b2ad0","sha512":"7399195eab6f0784ce9b3e6adb7e549d4272d5dccc1fa1f2c335fb63011644bf070da98f850e09f20f071e06d0b531b16eb66f340b83410abf64968f5f7cd129","ssdeep":"768:U9tZcEw/od6rUOdAFsifnAMC2rAaAMFVoP6+6sPnhmDLqAIo7hspmwO6fpk7aOjD:hposUOdebE2rdFVjsPhOsujyWXjC8F","tlshash":"7343298e7e0a94aa09f3937679ce1f5020fa05c18265841f4bfcc5fc53e2b5a6367728","first_seen":"2026-04-06T13:18:05.333105Z","last_seen":"2026-04-06T13:18:05.333105Z","times_seen":1,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/d22f70a8838b443d991d514bb02d230c.jpg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/d22f70a8838b443d991d514bb02d230c.jpg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 27037\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B272C78BAF3635AF51AF\r\nAccept-Ranges: bytes\r\nETag: \"D9172B7E12B1AD69E262F46179817E18\"\r\nLast-Modified: Mon, 18 Nov 2024 11:47:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6145185040872919626\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2RcrfhKxrWniYvRheYF+GA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":27037,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Spain - Round Flag Vector Flat Icon,\u0001, xresolution=85, yresolution=93], progressive, precision 8, 612x612, components 3","md5":"d9172b7e12b1ad69e262f46179817e18","sha1":"dd15ff61f81f39d2d24d481b95f3b85968aac771","sha256":"8dcb12f11034b96646d5d7969e27c6d677fa014d7da706d10a9ad2a6006a0efc","sha512":"be7e5d585c1d976aa7164be02bc28ab0bdd066b7ac55f9e3cb166266e2b4055aa34bfbe884744472a1ed56d59241386ff26a9a3fc805f8a352f27830ed087fa0","ssdeep":"384:vneId8kfQ5b0IT9D1ODq5fvho7gLiGTlLoONiIzXiyRIlbLY0PpmH1vQZaYGIwcu:vakfpK909j0TvR0P8QZaYG8Xe","tlshash":"e4c2c0f98c445124c0595f7708fb6b42e8ef4cb28e3fc27a2385865682aa5e5bbd4748","first_seen":"2026-04-06T13:18:05.334138Z","last_seen":"2026-04-06T13:18:05.334138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2070,"timings":{"blocked":1761,"dns":0,"connect":0,"send":0,"wait":296,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/914430ea7c904a21bbb18e7e235febf2.jpg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/914430ea7c904a21bbb18e7e235febf2.jpg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5190\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2728B90443934AE1E5C\r\nAccept-Ranges: bytes\r\nETag: \"D8D500C828478562B2B3AA2869FC9701\"\r\nLast-Modified: Mon, 18 Nov 2024 11:48:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7091754642174740098\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2NUAyChHhWKys6ooafyXAQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5190,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Flag design. German flag on the white background, isolated flat layout for your designs. Vector illustration.,\u0001, xresolution=159, yresolution=167], progressive, precision 8, 612x367, components 3","md5":"d8d500c828478562b2b3aa2869fc9701","sha1":"2cd509d8b600ce419f8094a33e4a95b7066d2849","sha256":"e531a66b85a0b5a1f13b6ed8da4f303dc6ece97f4b965ee125446734f8aceef6","sha512":"5cb38247c2b0b79c2432b317d98110f05cf9372326466fd12ab47ef08e03d4740843e4cfd86a3d9f07ff85815d5233b799a57dfbe45e36e08ed2fe61828bd815","ssdeep":"96:6DWWqknsxF/2Dmn/4DGFbi8QvKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKn:6Ukni+JaRg","tlshash":"0cb19bef79920102c48679b3185d476b7a243a20a34b46e3a4d48d73bc608f7f7d7997","first_seen":"2026-04-06T13:18:05.335259Z","last_seen":"2026-04-06T13:18:05.335259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2490,"timings":{"blocked":2013,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/core.esm.6acae16e.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/core.esm.6acae16e.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gshortterm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992a-9e43\"\r\nexpires: Tue, 07 Apr 2026 01:17:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-04-06T13:42:54.579428Z","times_seen":59,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/core.esm.6acae16e.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/core.esm.6acae16e.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/assets/index.3224b3d7.js\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992a-9e43\"\r\nexpires: Tue, 07 Apr 2026 01:17:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-04-06T13:42:54.579428Z","times_seen":59,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/926facfc3ba641e8ab73bf0bbed85f0c.jpg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/926facfc3ba641e8ab73bf0bbed85f0c.jpg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35389\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2718B90443934441D5C\r\nAccept-Ranges: bytes\r\nETag: \"A142C5EBD4D345619BE615DFF2C57FC0\"\r\nLast-Modified: Mon, 18 Nov 2024 11:47:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13820195555817095111\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: oULF69TTRWGb5hXf8sV/wA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35389,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Portugal flag round icon vector illustration. European country.,\u0001, xresolution=113, yresolution=121], progressive, precision 8, 612x612, components 3","md5":"a142c5ebd4d345619be615dff2c57fc0","sha1":"f8b2bf5bc598f248af195d820e69b8946df3c94b","sha256":"5766fe02fbf6e993b5dc1a02b399da04f4ffde630f5cb3182e5655c0af45822e","sha512":"cf6061b2fbb57aae7d8fa9f759d2a8b5aa2b97a381b0fd3519cf676bfd0fba7ae99f6d410322296b7b567a5a3ddb327b5dec5a5a3341df8820c9d6aed7c3f5bb","ssdeep":"768:/wl0ACWohKrY/TX2FLyLRMDHNtdEZt4rix2Wawd:/wl6bsL4oNtysixMO","tlshash":"def2d05d4fe39c02d0c8373596f75b0f88019e87c8c7194f934592a618a63f9bbd82d9","first_seen":"2026-04-06T13:18:05.336845Z","last_seen":"2026-04-06T13:18:05.336845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2034,"timings":{"blocked":870,"dns":0,"connect":283,"send":0,"wait":291,"receive":18,"ssl":566},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/da9bc5822529a2c225e057c0d8d50f36.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/da9bc5822529a2c225e057c0d8d50f36.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 12446\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B27293A7E930309AAF20\r\nAccept-Ranges: bytes\r\nETag: \"DA9BC5822529A2C225E057C0D8D50F36\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5477238290917760361\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2pvFgiUposIl4FfA2NUPNg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"da9bc5822529a2c225e057c0d8d50f36","sha1":"82b82dcdfcdb456c30cd1901d162f6eda4755768","sha256":"f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6","sha512":"c9c6ab97fd64a5d5901b3b97e3e2ff445588c37246abd20315c9f23496ba7040f6a14d0d95b5b0012cf7a30ac026ae818b16befef162330410d38810248b2ff3","ssdeep":"192:lF5DMISPEWXUxj4OcJTctXlli9mso8hM4CaD0ze/uCPuuzxd3iDPr:tMVEBxkO0TctXS9K4J/uCPB1ReD","tlshash":"93428df604472703f9bc1c97a3de061d18750f359251ee25d0ec1c5972a8aaf1bf606e","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-06T13:18:05.337804Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1691,"timings":{"blocked":1374,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/images/common/home/Selection-a.png","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/images/common/home/Selection-a.png HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Apr 2024 17:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992c-fbe\"\r\nexpires: Wed, 06 May 2026 13:17:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"d41eddbe11398decb778d09c35fe7c34","sha1":"5f81f58df40d09a3b8cfe3707ad3fd451c7e6859","sha256":"381aa09f34edb9c8ff2d3fb0ff09af42260fefc41c48a8e03ab14a9f2cd849a1","sha512":"e8da5839ebe24ef89aa2c7c15968a4a589303a2303329f20f44f360b62de3182cd0a431811297da1279d76cd2ec0c05da4ed13e1b587e35ba75a7f6cb3de30b2","ssdeep":"","tlshash":"b081807b352c750dcd2510742761408dc27229301ddb1079aeca6d42bd7297577603bf","first_seen":"2024-08-19T17:34:46.654099Z","last_seen":"2026-04-06T13:42:54.530886Z","times_seen":76,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/fonts/PINGFANG-SC-BOLD.ttf","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/fonts/PINGFANG-SC-BOLD.ttf HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/assets/index.1f16077c.css\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11139412\r\nlast-modified: Mon, 22 Apr 2024 17:06:52 GMT\r\netag: \"6626992c-a9f954\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11139412,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa2b728","md5":"a5f40309207afeb657ed9436536d0d0c","sha1":"e08b67e9d2d1836268cdc905d4a7bc8aaf46d583","sha256":"b03430452ce3669613d60acaf8d799052aa1fdc03012feb481b5a27fe8a89fb8","sha512":"2a5d9eaeec304955d870d9e68b8efeb3a9ed268b1922a8750cc2fbc79b1eafbfde68f74b6dbddaae97950f0f722790d6a24ccda0c5e28ec0f5a7d252f9fd68f3","ssdeep":"24576:Jk3368WWqmO8+RYKjcpbR8z0AuxRbTn1tET64wBQFFlUqIY7NMIbvW:Jk336M5BI1E","tlshash":"36256d93c7c47d2d9b22fe3c6410f26ff48e5409892ad2f9cf632f36185656449a8eb1","first_seen":"2025-07-29T21:26:30.322215Z","last_seen":"2026-04-06T13:40:47.822175Z","times_seen":31,"resource_available":false,"data":null}},"time_used":2115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":1575,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/charting_library/charting_library.min.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:32.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992a-2a6a\"\r\nexpires: Tue, 07 Apr 2026 01:17:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-04-06T20:00:07.008477Z","times_seen":421,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/common/getCoinList","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://gshortterm.com/\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T07:11:48.946741Z","times_seen":13452227,"resource_available":true,"data":null}},"time_used":1412,"timings":{"blocked":618,"dns":29,"connect":405,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/common/getMt5Amount?coin=xau","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 3\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xau"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a5beb4853fa078ccb831726662aa1fff","sha1":"91e7f3399405be0307b8390b3dc38d83bd9a1e98","sha256":"a3e7354ced32a4daf7ee47f1f645b1b8c4ef08593b17edd5d5f63f32ba2b8869","sha512":"72ca4c3d96136a098a371c3255a5b16d869ab8a8d67988a63f6168728e06d8e03da9459cd2879306193b84b17f8d4786fdef17f96a3c5202c95a5a579d97398f","ssdeep":"","tlshash":"4d9002555c1c8682a88300a5950a1204002431a06a2492888c599135d0891a63444858","first_seen":"2026-04-06T13:18:05.340455Z","last_seen":"2026-04-06T13:18:05.340455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.09d81740435c046b887686bfce921ec53.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09d81740435c046b887686bfce921ec53.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 2243\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B27193A7E93030C3AE20\r\nAccept-Ranges: bytes\r\nETag: \"304ABF3181C09EF01CB52061F5DC50B9\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2871216098384110039\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: MEq/MYHAnvActSBh9dxQuQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"304abf3181c09ef01cb52061f5dc50b9","sha1":"2c96d3a437349f4695e4a6c671bf383f2784515c","sha256":"9c4afee726d377d43e508875c75fd30a28b4cb7ef49ac45dd85f1c0a5f4220e0","sha512":"81eb2efe3f34d15dc5c19932e807f009c8ca6641227807d764e524152cf540876f60d51092f8971609b8e0e36bca92a9561c29905ba84ad9eae70f01e1e7213c","ssdeep":"","tlshash":"ad412932e4d20f219a0bf40fa86f682928bde25c6156c73c249f9472128b42ede92488","first_seen":"2025-05-29T23:41:24.304594Z","last_seen":"2026-04-06T13:18:05.341592Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2007,"timings":{"blocked":866,"dns":21,"connect":277,"send":0,"wait":282,"receive":1,"ssl":557},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.09bc6c590afa84f0780893393bbfe6f8b.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09bc6c590afa84f0780893393bbfe6f8b.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 1086\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2716AFD363931102122\r\nAccept-Ranges: bytes\r\nETag: \"4315CA4480C0BC8BDA0ABE1E5B29D95D\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8880614855979518746\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QxXKRIDAvIvaCr4eWynZXQ==\r\nx-oss-server-time: 12\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"4315ca4480c0bc8bda0abe1e5b29d95d","sha1":"44cd40351b2389219a2f2c4d63660cd30d9d0739","sha256":"e27e3ed79f0acf02999cb82c41f11852b83eec445b8804f008514764382a11fd","sha512":"44d0a7c9275f059daf7c563752b5d14299c320989713855f853436f62077b32114491d8fe9f94b61927b16698ea8e7d345078a84ec31248ee0016f211ebf60b4","ssdeep":"","tlshash":"3011b62b17507e488ebe562a2511ba296179f99a122bdf130ea8c40a0119f8801965cb","first_seen":"2025-05-29T23:41:24.325311Z","last_seen":"2026-04-06T13:18:05.342783Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2029,"timings":{"blocked":865,"dns":29,"connect":280,"send":0,"wait":291,"receive":3,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/58d418ebebf1400abd5b75bf7875a054.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/58d418ebebf1400abd5b75bf7875a054.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 332\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B272C390C33437A1CF8B\r\nAccept-Ranges: bytes\r\nETag: \"EE4EDA48567F400FBA2F4B27645E4D00\"\r\nLast-Modified: Mon, 18 Nov 2024 11:48:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1056983023880572089\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 7k7aSFZ/QA+6L0snZF5NAA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 255 x 153, 2-bit colormap, non-interlaced","md5":"ee4eda48567f400fba2f4b27645e4d00","sha1":"260670e1ba9f5550f916155b79234fbfd96f54ed","sha256":"8ce465d45c2f6022cc12cdedf7d2601432fb758253428c4a425c56ec91bdfb9b","sha512":"e5c0f362e66b4b670571d79c2cb810bcd99701635e77d91db3830ae135a76b55246fb30243303ab7474f0386230056abebfa1716c32d1cac2667e39feec30041","ssdeep":"","tlshash":"d6e026c7e536f9f0d50301364b991340fdb1080b66670314e5b5fc894918f8c5568fd0","first_seen":"2026-04-06T13:18:05.344438Z","last_seen":"2026-04-06T13:18:05.344438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2488,"timings":{"blocked":2016,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/coinInfo.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/coinInfo.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B272C78BAF36355451AF\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-04-06T13:54:01.067693Z","times_seen":383,"resource_available":false,"data":null}},"time_used":1720,"timings":{"blocked":1390,"dns":0,"connect":0,"send":0,"wait":300,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/XAG.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/XAG.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 899\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B27393A7E9303076B120\r\nAccept-Ranges: bytes\r\nETag: \"7A30B4FAF693F3C98880AD62DBEB6F52\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11713017204127528114\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ejC0+vaT88mIgK1i2+tvUg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"7a30b4faf693f3c98880ad62dbeb6f52","sha1":"3e77cb5055bf4f614518892ece717298536611a7","sha256":"df7c0d817546a5d5db08dc16f5014ea629a64d3adb83c2d28ea0a3eae83a0702","sha512":"ca3d38c3b1627710babc109cf1f4037243417d174bd2101fbf4413ddc2b2ea9244b6e452abd1b7e76ecdd950760255fc9cb69c455619c9a7fd0b6d33ab9a7bd6","ssdeep":"","tlshash":"201167ec2374b87cc6fc1d1ad0bd8153173ba07578019e95557f593d6461a77c286242","first_seen":"2024-07-08T21:52:55Z","last_seen":"2026-04-06T13:18:05.346252Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2995,"timings":{"blocked":2714,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/CommonMethod.8eedd4a3.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/CommonMethod.8eedd4a3.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/assets/index.3224b3d7.js\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 871\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\netag: \"6626992a-367\"\r\nexpires: Tue, 07 Apr 2026 01:17:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"bed6f735ee3eeebb47b4d8938a275fa3","sha1":"77440fd7e87c279f79e1421cc2138f79a5e94973","sha256":"1f55b9f50d93897c73f7e850794e523e52d16f9034118c4b969229a65c4a19d1","sha512":"2949028a739149ccb599fe862771e0f48516fcacd7f754268f2d651956529a35c3febae718841b396ff465c8916fee3bc2dc752c8f56efd31c9ef034c63af125","ssdeep":"","tlshash":"4a11ccd0e48dfb290368dba5a2248033f25d58b51e288368c0f95eb57b2d449b79ea30","first_seen":"2025-06-07T20:38:42.155028Z","last_seen":"2026-04-06T13:40:47.834334Z","times_seen":5,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/solana.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/solana.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2726AFD363931C32122\r\nAccept-Ranges: bytes\r\nETag: \"670C723ABC22056BC5368CA2A97DD6A2\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-06T13:54:01.020275Z","times_seen":402,"resource_available":false,"data":null}},"time_used":1693,"timings":{"blocked":1390,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/AUDUSD.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/AUDUSD.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 3225\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B273CE63A83433B9547A\r\nAccept-Ranges: bytes\r\nETag: \"854FA8B366E894776AFA4E37914A8FE4\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1324370303077704430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hU+os2bolHdq+k43kUqP5A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"854fa8b366e894776afa4e37914a8fe4","sha1":"6f1d264223564f8e636b91ed6617803bf9871411","sha256":"a392b041e5e960c44e5e56c907445985c0da0861831943724ffc126b6eff8649","sha512":"d5289137bde00ce284ee7ac1969352694ec709c02f3a684b71e6e37292f03838c4d638f168f11a4847b05f381da0462a62759f1f01339b63e706a9b33b2cc2c8","ssdeep":"","tlshash":"3b614d61c90b9afa079292f479194841789dc208add54fa41df273104ebff251a0083b","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-04-06T13:18:05.348047Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2724,"timings":{"blocked":2438,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/XAU.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/XAU.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 957\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B273C390C33437ABD08B\r\nAccept-Ranges: bytes\r\nETag: \"4CF7FEBCDE802774E860280F72473B4C\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15843907226721346241\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TPf+vN6AJ3ToYCgPckc7TA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"4cf7febcde802774e860280f72473b4c","sha1":"349c9060813d3c6cd535d6d8e7469adebf51f03a","sha256":"6ba1d900f5edeb32b50a7f5ca28347bc3fd7495a2032ff4d9c9b6a518a609f3c","sha512":"f10fe7221a8ff89eac50b17244fce40b9c07963db44ba1a8a5b6fe0c47dcb6fe1abd474fd8a2cd559e0b6da74d231bd161254e4ebf8227a8b74b3a0915cf7ac8","ssdeep":"","tlshash":"a41150ea1108aa13c4850e602aa261585cbf81f976e7942f3bf68495da3a16c210927f","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-04-06T13:18:05.34924Z","times_seen":28,"resource_available":false,"data":null}},"time_used":2976,"timings":{"blocked":2705,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/index.29ebc297.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:32.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/index.29ebc297.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 00:02:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cb0f0c-561dfe\"\r\nexpires: Tue, 07 Apr 2026 01:17:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5643774,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b78c611d0d247310ccbf74777da85cc6","sha1":"54e3f6f65b5dfcfd0ab1250b5b819801932e86d8","sha256":"1295bb8839d26fec58fb0128d98efdd130ffff1f1e95d4809b2e71a8bcb48b52","sha512":"35714ec423c705a7b7f0d1afa0ef3e5b289b4ae585f8813f7d59bffa26ab0da846730dcfe618b25d0ee77a0f5ca3b033955f4979474383fcf8ee25fd8430bb23","ssdeep":"24576:bWZyDc899mzMF9yG/hLqfVgnt2JaIT3XBIkT:bWZyDc899mzMF9yG/hLqfVgcJaIT3XBd","tlshash":"ab25f80572d5313a879af0a1784bcc1eb73e5b0ca38194e8525c9569296dc38d3bfeec","first_seen":"2026-04-06T13:18:05.349983Z","last_seen":"2026-04-06T13:18:05.349983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/common/getAllSetting","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://gshortterm.com/\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T07:11:48.946741Z","times_seen":13452227,"resource_available":true,"data":null}},"time_used":1419,"timings":{"blocked":621,"dns":30,"connect":405,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/GBPJPY.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/GBPJPY.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 2232\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2738B90443934441F5C\r\nAccept-Ranges: bytes\r\nETag: \"B9BF5A9C748132964C1B4BE38B7FE1AB\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9146111733117219810\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ub9anHSBMpZMG0vji3/hqw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 43, 8-bit/color RGBA, non-interlaced","md5":"b9bf5a9c748132964c1b4be38b7fe1ab","sha1":"c585541178fb12dbeb3a5cae05fe87bd75d4a2f3","sha256":"fbc28b34bd1e3a164840756a741e71c2b183561757447f1905265854b70e03b3","sha512":"73cdfca4192fd58846be84aa4dec7977b250263fc1b0a4522d8370c32a1227c3b92b1f1cf13c2c6bc6e7204a3c5b74fd22223374f0e385a01cc11dcc97d978c4","ssdeep":"","tlshash":"02415c64a042280844abcea36c0f7707ce6b26db13c385317f1a062d904de3b81c36f1","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-04-06T13:18:05.351287Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2718,"timings":{"blocked":2434,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.gshortterm.com/ws/a07ccccb-66ba-448d-9ca2-f71269d15091","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"GET /ws/a07ccccb-66ba-448d-9ca2-f71269d15091 HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gshortterm.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Y4EOwA2sDVwpb470mcq7hw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Mon, 06 Apr 2026 13:17:36 GMT\r\nContent-Type: application/octet-stream\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gshortterm.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: zCUbnwrTCfq3D95yFwiBSfjqLfo=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T07:11:48.946741Z","times_seen":13452227,"resource_available":true,"data":null}},"time_used":2066,"timings":{"blocked":0,"dns":769,"connect":941,"send":0,"wait":176,"receive":0,"ssl":707},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/assets/index.3224b3d7.js","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:35.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /assets/index.3224b3d7.js HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gshortterm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Apr 2024 17:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992a-6b8b\"\r\nexpires: Tue, 07 Apr 2026 01:17:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27531,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27530)","md5":"386c9d3df478d699019456b980577983","sha1":"bb65dc6b44522afcc5105b836a7a8b046c85d766","sha256":"ec967b1b86761f0e814cd692f73e4a4cc71134a9f08aedb49d7e8cb326501b10","sha512":"06654c5e9649f7ad1b2d92d5bfaa3eb554ee2d736897f87d08d05764aa923397d25bd7e3a0d67c91c9e012fa4b3cf27ba89376265847a5274a517208aa004b78","ssdeep":"768:+h6gUT+OS1wdB+8ro6k7y1khsjNc5nnIBVzJD0DdcWerxE:C60Fb","tlshash":"63c261adf51e8a78f1f79851141c04463a4cbfd381508653b6fc3e15aba2ebc278d72a","first_seen":"2025-06-07T20:38:42.110256Z","last_seen":"2026-04-06T13:40:47.804656Z","times_seen":4,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/common/getMt5Amount?coin=xag","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://gshortterm.com/\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T07:11:48.946741Z","times_seen":13452227,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gshortterm.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:37.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.gshortterm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 07:47:48 GMT","end":"Sun, 28 Jun 2026 07:47:47 GMT"},"fingerprint":{"sha1":"61:B3:AB:C5:D4:41:B6:FF:BC:FC:8B:34:9B:BF:15:AD:18:B7:19:D1","sha256":"4B:31:06:33:C4:2C:1B:19:55:27:A8:D1:49:AF:BF:8E:CB:AC:48:DF:45:2C:9B:6F:98:0D:3F:A8:94:71:AD:CD"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nContent-Length: 11\r\nOrigin: https://gshortterm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"ROLL_NOTICE"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:37 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gshortterm.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e67d05989852f2785206ae71023bc3bb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7bce1372cc28732513e40d0727fd5978","sha1":"e594357c2589cb8f169b1bd285f01b429065b416","sha256":"738dade61162984272d919983ccf917ef6a6e291398e29433a1a3a299bd66967","sha512":"e7435b3321a8e87cff5c358d1d3b6f9f47179384eab9699f3f2655bb02f7e35b0e6325487fc5d437958e0b86d06c9cad54051257033d6893e9d852f3b0dc5964","ssdeep":"","tlshash":"a711af0a19795e7a080295d329c97dcf435f5393dd74cc748b7a8f1c81e49bd2f1a544","first_seen":"2026-04-06T13:18:05.353216Z","last_seen":"2026-04-06T13:18:05.353216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T13:17:32.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 31 Mar 2026 04:21:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cb4bba-1968\"\r\nset-cookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6504,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1071)","md5":"dd7825bd41db8aa63cc8476fcf211f4f","sha1":"334c451f7ebf1646a85970d095a36cee2ccb4b3b","sha256":"b9ab9f9632cc601bef684b77f82282f552fc72b992a5a422a0abebfc63d47fd8","sha512":"fc355f7d60410c3f99bf87cf4eded405cebb3a5a6d081ea3a52257d00c5d18caf03d86033326640d954b047aa22f629bfcc887fbb8194da2bfc2107010212380","ssdeep":"96:75Puso//Wcb+8vdlaHUPv6mdj69iQPhWH2mUsGKAiowGti470KADq2I:lMHWcxvXaH+ZdnQp02nfD3btxAm2I","tlshash":"0cd1951b1ee0e1361223512db767f209e222006b5901d8957ecd8eec4f52fbd49dfaad","first_seen":"2026-04-06T13:18:05.354335Z","last_seen":"2026-04-06T13:18:05.354335Z","times_seen":1,"resource_available":true,"data":null}},"time_used":969,"timings":{"blocked":396,"dns":37,"connect":176,"send":0,"wait":177,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.0d2d169261acd4ec38301f0463f4d3610.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d2d169261acd4ec38301f0463f4d3610.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 945\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2726AFD3639311D2222\r\nAccept-Ranges: bytes\r\nETag: \"B2CC0B6A2B928A3D0785DDBAD58E7EB4\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7139311599118660718\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sswLaiuSij0Hhd261Y5+tA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"b2cc0b6a2b928a3d0785ddbad58e7eb4","sha1":"81ab8459ae5281d4a091e60bfef3b9153535f37f","sha256":"b7209baf258b008d38d11f6d10d47bdee856a1e6456c879a49305ea97d1a5bce","sha512":"231e5ab8dbb2f6305c9fcd265f3d442575d639479baca27e91014677d3f0c0d7dcf3f238e607767a03cfcd5689bc0e81cb3d0f7821bc1367a20cade8306be7cd","ssdeep":"","tlshash":"a611c8ef80eb9471a962bd6ecc1a084edf7124de0210726009431d21276e52d5154605","first_seen":"2025-05-29T23:41:24.345145Z","last_seen":"2026-04-06T13:18:05.355543Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2016,"timings":{"blocked":1732,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/NZDUSD.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/NZDUSD.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 3004\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2736AFD363931F52222\r\nAccept-Ranges: bytes\r\nETag: \"3324392DB124E1FF022F77669B9028E9\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17717082248578616007\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: MyQ5LbEk4f8CL3dmm5Ao6Q==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"3324392db124e1ff022f77669b9028e9","sha1":"8d833527f1c4c2032a2369c74268881dde5ec8b0","sha256":"674ae651d7c3a537abde8086b45d2f3456f01d0a51b74ec78381ad51ace21567","sha512":"4c385f00df33b0574c717232dff223077e2a921e624098236d50601d3f1391a30d549a448388aa6be3c9e47a951cd7b017eb901d9612173abb893c8c5cf14c7a","ssdeep":"","tlshash":"87513ad6cf9adbc0f71dd874c5572ea9a3112123261cea82f9f9e10824e2948166788c","first_seen":"2026-04-06T13:18:05.356234Z","last_seen":"2026-04-06T13:18:05.356234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2724,"timings":{"blocked":2442,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/AUDJPY.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/AUDJPY.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 2335\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B27393A7E9303008B120\r\nAccept-Ranges: bytes\r\nETag: \"B239F2284E902D8E4B77BAE180E6A1BE\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18297275059902119360\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sjnyKE6QLY5Ld7rhgOahvg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 43, 8-bit/color RGBA, non-interlaced","md5":"b239f2284e902d8e4b77bae180e6a1be","sha1":"e4b199b65ef76accdff3927690d885f3d9caed7e","sha256":"0defe485366e2b9d88e195bd68d2c0a3ccc98f409d6198efe8b3c2790ed99afa","sha512":"bb6e8330ffb8dbb859fb642c33c082c3f592309d3dee8a6386a5520a1f948e6e63f5a1a06c5cd20d8671f7c8c0e197c6f2d479f370c325b1b9739e9f932d3392","ssdeep":"","tlshash":"1c414df15f4587192357d0dd6df280bde11fb20990d6316fa8b0f86f0a5a20c49579fa","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-04-06T13:18:05.357326Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2719,"timings":{"blocked":2437,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/images/common/home/downloadimg.png?1775481456638","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/images/common/home/downloadimg.png?1775481456638 HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Apr 2024 17:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992c-22e9a\"\r\nexpires: Wed, 06 May 2026 13:17:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1368 x 972, 8-bit colormap, non-interlaced","md5":"4e59e1224e1c27738197d0b1c328c15c","sha1":"84f186b75c956ae9b5ff26b8d0e2b32ff0492e98","sha256":"1811704cad965db80f02ccca4a90b177600997e3c26128f4fd5a15e0dace500c","sha512":"7873a8c641cef1cc30fd926b9f99f558de23adca684a4c61c6d439b791a3e35a539d5c4da8970957d0fc1d1aea6a11939685779a41990f121c72a9426d085774","ssdeep":"3072:ruhlDWNa+r4srR2T+P9OkmGgv8uN2u7LM7xJNVewRLUhJJg8:hBrjAXEw5uJNVshJJT","tlshash":"6ed31283113a1650cdfefefb4a158f47861629b4c81ca35e5ebb29caa155f03f3a1603","first_seen":"2024-08-19T17:34:46.648366Z","last_seen":"2026-04-06T13:42:54.522176Z","times_seen":75,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.0c9d4ed570f5647f7b3d0421321c601e6.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c9d4ed570f5647f7b3d0421321c601e6.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 2475\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B272CE63A834332C547A\r\nAccept-Ranges: bytes\r\nETag: \"F20472B88DB8D665915F23843A5C345F\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6476007230303732984\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8gRyuI241mWRXyOEOlw0Xw==\r\nx-oss-server-time: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"f20472b88db8d665915f23843a5c345f","sha1":"432cd3a9bcb3e91616b26347a24344cd62ef1d51","sha256":"a663b5e6fab2b49edd56fa5f2b4968bf0468a6ea6514527a52deab189875b35d","sha512":"ee37beb0ceaf0cecb43a449b17a778be7365f754fc3bea4da6ce9073fd4e21e08d3dcef1d3196e5730b88b8c2d5a50548b69c0b3a61a216323e66e3bb75789d8","ssdeep":"","tlshash":"65514d923ac07b34cb43bc15bb0365f45f9944aed16793000aa3fb3742750465e653d5","first_seen":"2025-05-29T23:41:24.356373Z","last_seen":"2026-04-06T13:18:05.359292Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2487,"timings":{"blocked":2028,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/fonts/PINGFANG-SC-HEAVY.ttf","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/fonts/PINGFANG-SC-HEAVY.ttf HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/assets/index.1f16077c.css\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11114788\r\nlast-modified: Mon, 22 Apr 2024 17:06:52 GMT\r\netag: \"6626992c-a99924\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11114788,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa256ec","md5":"c11d4835ea9813d0e654d4c375257421","sha1":"44bdbe2b862dd5f236417788db8b286ebb2265af","sha256":"61a3b6d3ef3960a85ea310f8667b8615da678e9edea8b5036c8d9a09aea7169c","sha512":"1fe75b597c55aa2319b1d0efb5b02e4fd4b4e8a4772cf321100658f80957481254e68756b2e90f2cc7bdc0f585043659a10af097d18995037bd4e59917c18938","ssdeep":"24576:BkgBFPX1+oxFnjOPwVgsVDQezA7FEWXS5ltkCbudYqrj2wn0:BkkZC1q","tlshash":"07256dd3c7c87d299a21fd3c2510f66bf48e50088a25d2f9cf672f3618569744ea8eb1","first_seen":"2025-07-29T21:26:30.325138Z","last_seen":"2026-04-06T13:40:47.824044Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":1157,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/binance-coin.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/binance-coin.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2718B904439349F1D5C\r\nAccept-Ranges: bytes\r\nETag: \"A533EECDEE5A789E7D94F8F79F95D588\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTPuze5aeJ59lPj3n5XViA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-04-06T13:54:01.035508Z","times_seen":414,"resource_available":false,"data":null}},"time_used":1695,"timings":{"blocked":1140,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/tron.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.242","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/tron.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:17:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B272C390C3343744CF8B\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-06T13:54:01.063366Z","times_seen":338,"resource_available":false,"data":null}},"time_used":1980,"timings":{"blocked":1688,"dns":0,"connect":0,"send":0,"wait":286,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gshortterm.com/resource/images/common/home/investimg.png?1775481456643","fqdn":"gshortterm.com","domain":"gshortterm.com","tld":"com"},"ip":{"addr":"119.42.146.38","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gshortterm.com/","date":"2026-04-06T13:17:36.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gshortterm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 08:37:24 GMT","end":"Fri, 26 Jun 2026 08:37:23 GMT"},"fingerprint":{"sha1":"76:55:19:AD:76:68:C6:58:70:4F:0C:5E:65:B3:09:7D:A5:26:67:B3","sha256":"D9:AE:95:02:8E:EE:19:32:9E:16:91:C7:2E:C4:C7:15:5B:D9:07:BA:16:30:6E:BB:23:70:84:D7:C6:BB:2F:FF"}}},"request":{"raw":"GET /resource/images/common/home/investimg.png?1775481456643 HTTP/1.1\r\nHost: gshortterm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gshortterm.com/\r\nCookie: server_name_session=ddaa8d93ad7af141d0d1efd0393af53e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:17:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Apr 2024 17:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6626992c-12ec5\"\r\nexpires: Wed, 06 May 2026 13:17:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 960, 8-bit colormap, non-interlaced","md5":"9267ad6af6eaacc24390a8f33870ef76","sha1":"6541d731da0afcd1af6587e1b4c13bc5f1fe4d52","sha256":"aa6a9c639280f31ff25cd23af4f8cb4f12b731b972a4468ae251daad06117b11","sha512":"de85a8516252d1fc79ef5fd40ddc19ebd4e3f7ca0e933bb0ae91715748bde79cca7b3e650851d421dfa44e69236722340f17deacae4b2e83150aebfea98b9eaa","ssdeep":"1536:i4LGU8vqIyjyXqRwksQsohMUqQHwqO3X6GU0NSKqYN/o/rTTkPjtbG7jqs:i4LGWIyjyaGksQvLqQHwx97SKqC/o/rh","tlshash":"df73013bb7bc0646900205a14fb212e92b660cbbe647fc86fe711ea19936d2b5115acc","first_seen":"2024-08-19T17:34:46.66014Z","last_seen":"2026-04-06T13:42:54.592599Z","times_seen":75,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}