{"report_id":"608ad0a6-ab62-47ae-8dd2-2e568712c21a","version":6,"status":"done","tags":[],"date":"2026-02-25T18:33:21Z","url":{"schema":"http","addr":"gxcctw.vip","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"172.67.189.83","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"title":"TWFXCC","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gxcctw.vip","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"172.67.189.83","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T18:33:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gxcctw.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-22","domain_rank":0,"first_seen":"2026-02-25T18:00:43.878537Z","last_seen":"2026-02-25T18:00:43.878537Z","alert_count":33,"request_count":33,"received_data":7790879,"sent_data":15826,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h5-api.gxcctw.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-22","domain_rank":0,"first_seen":"2026-02-25T18:00:43.874901Z","last_seen":"2026-02-25T18:00:43.874901Z","alert_count":65,"request_count":65,"received_data":1092355,"sent_data":33082,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"storage.googleapis.com","ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-02-23T03:22:40.289374Z","alert_count":0,"request_count":18,"received_data":684400,"sent_data":8611,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-22T22:27:51.54973Z","alert_count":0,"request_count":2,"received_data":261175,"sent_data":979,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"admin-api.twfxcc.vip","ip":{"addr":"104.21.28.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-11-01T17:44:30.200166Z","last_seen":"2026-02-24T16:10:29.2333Z","alert_count":0,"request_count":2,"received_data":3670,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"98cb1f471a0de238da72628a4c39dea5","sha1":"de6c28f3b2e2ee6f1b47b45d014bff6a887bcd08","sha256":"b1e75cfc14734b3cb73043c2d0b3e1f10dd80af0775ef978ec39a0500f445f26","sha512":"5ea0135c7d00e74a33a6ee8ad3ea92eef10154456aade6904e59c1bafb3b755cf2e0c2d1c3efc83cae6dcf2db7354bb90ca930c1df504fa39eb03c381206c6a9","ssdeep":"","tlshash":"38c08cc5b0c26d40160aa49028ff35e89024442bb0881b428ce8e8983e220b08237e98","size":152,"data":"","first_seen":"2025-10-12T16:34:39.992257Z","last_seen":"2026-06-01T14:38:39.523555Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4acf87d00c4897d30dc5cb9aeadd7c45","sha1":"dcf23a6536e55481fa1bac3bd3fd146a91e65184","sha256":"56727def1b270126ba40c9ffb947309084fc4a22d6caafd6f785307e9614ad82","sha512":"842f100296530229b32e93ef969aabe0745435f435f79bc069fbf45f5fd47526d2d8e7d2ffb09957fefdfd831d27a0d1c5814ae7ff0e5177f8813ca941bfe17a","ssdeep":"","tlshash":"5dc012d9b1832d1016166410957fa4d8912844767188ab92ded8e8583d534b45137f9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.945429Z","last_seen":"2026-06-01T14:38:39.512471Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"56ed1dc7a7c7c4d0135776e306ae9bcb","sha1":"18d8914c8d7a21ea2f664080fcbcaf0c942c3ac1","sha256":"055cb83a18d103da0b9e79549d4ca0aaa5b2c7445ede7bf18317c53d8d18570e","sha512":"3f4c3d523962372f297e9aab82917e8d07f1b8f69c4a1fa2ee8e3721d73001e60707bc6de4111ca20196ffefd97f3df6b2f07211b3841f397635d05b9cd4e2e9","ssdeep":"","tlshash":"b7c012d8b0c66d002616a41028af28e8a0288026b44c1b968da4ec592a620f48227ead","size":170,"data":"","first_seen":"2025-10-12T16:34:39.92057Z","last_seen":"2026-06-01T14:38:39.517283Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"99362d42c48c3ce8a91d0ef845a6d291","sha1":"7255a4d130d514351caf81f67fb4d9cc0d83c62b","sha256":"be94163fb61fb00bbe6983f50081c480207345b8954f9ee50fb2c1c2ae3e6073","sha512":"00d898d537893ec342ca42ae6de18ace2f732233bdcc9ebec86dadc655f76c242e445b9f21e0e764a91e23051842285042be74f3b088e36c08f664b359be5ff6","ssdeep":"","tlshash":"f4c08cc4a0cb7e145742691052bf29e4a0344027744cab038cd4d8482e274b4a23beec","size":154,"data":"","first_seen":"2025-10-12T16:34:39.92349Z","last_seen":"2026-06-01T14:38:39.514034Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-08T05:16:21.760327Z","times_seen":3523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08110f62fb9fc84a9c97290494d28dfd","sha1":"f87136f4653d31c87cc3f135a238e4ce522e2300","sha256":"cbbd0a958230490e956ff379a555aa855c2b5b81e1a8c6f02d2c426f07b3aec6","sha512":"32dc2c077f390e639a0c3a1abdaca29d51db258c6140fa795fc2d2bd508c2ed43fcbefa3c2176ec7a61b96eb5062230632effb6db528b4e6310cceaf0c6dbceb","ssdeep":"","tlshash":"6611cefe191ab02e6303405f976b7811647160e9000a588177ccdf9dab9afadd0cfb8d","size":1054,"data":"","first_seen":"2026-02-24T16:10:35.312128Z","last_seen":"2026-02-25T18:44:39.581238Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-08T10:36:39.375925Z","times_seen":36459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/assets/vendor-CpS3FrFl.js","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"45d41979dcfbed46fd729a049adeaf31","sha1":"f5f8ab99a1aaaf1625a86c0e5741b11b023b1509","sha256":"054d53b37c4362d6249834e89d0d146b111830a800d5309556206ecc4847c5ad","sha512":"ae2e7a86fff5bbcb61cd9b80520847cf6e1cc4228c406d02a3aaa4a896d3cf3e4c6923f4bfab8a0c7dac9fe7826ef9ad43dd16f7f5168e4a58f996b83d99a6ac","ssdeep":"49152:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URU4HLqsNMUE9LaRoIuU/Zv+ehV9wo8C:n+6X9eSw","tlshash":"77a53bb8b651b07507a720e5007f0907eb39690b704f84a8f669d8e67cbc94ad677f38","size":2238895,"data":"","first_seen":"2026-02-24T16:10:35.332193Z","last_seen":"2026-02-25T18:44:39.592099Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dc094b1b256d5c643caee7dbb2759bd0","sha1":"adf30061bd73776882c9b3c4307b9da89a77e448","sha256":"1924a94a5275e97ac50fd4b9ceb9cd137670a857a159826847a1bf70e4aee577","sha512":"7a645e4da9bc62cd103bc2b66fdb43d40826816fa26b64e459fa8889e42b5a9a1b67ef8218e9cb6cd999a1b9121cb41b3d8baedb76d9b45e861e40d72279ad1d","ssdeep":"","tlshash":"4dc08cc9f1e73e1026566a1514af68e8a0344836b0891b8f9de4ecc83e630f08237edd","size":162,"data":"","first_seen":"2025-10-12T16:34:39.965367Z","last_seen":"2026-06-01T14:38:39.537478Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e4a7e90831c1bdb26e2ce6df106a83d","sha1":"5923251fbec594eeba41afbfac24af5ee0e74d56","sha256":"6fc754e914ddb5d93f11d74413c8e9e0db331bbc04f357c8725c824b496c3db9","sha512":"03ce6da278085fad75e631597676ce71c0e5891687222594a0620581188e4e9b72f649d0262e9bd91c8cbfe1076c492d0b5389df988e74068ff6f79a1abb55b0","ssdeep":"","tlshash":"c7c08cc8b0c36d002602781055af34e99024802bb0489b128cd4fc5d2e230b09233eac","size":146,"data":"","first_seen":"2024-12-18T14:57:20.727033Z","last_seen":"2026-06-01T14:38:39.513235Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T11:27:23.68344Z","times_seen":5628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/charting_library/charting_library.min.js","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-07T23:37:29.554045Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/ac-chat.js?2.2.1764825825288","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-01T14:38:39.409214Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-08T10:36:39.37696Z","times_seen":38747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6bf3d54da83101c2d0cd0d94a69d3c04","sha1":"d125f3ba021adeb05c5c7dfaf4fc7e74a0e7b3ee","sha256":"2a2418700efee08efa3470a8e6e387ed7f4769f63bb147a00d2ca287af1ea474","sha512":"6d32fa0a1baf76885888126915cbe4a60047748be8833907a4585c6248e25837cce5f38efd8ce543d95735a113922eb8e236f6fa50efde28ea544f9f85ae2fab","ssdeep":"","tlshash":"edc080cdb0d32e183e01692064af3cd4f1344467b14817528c94d85c2d330f54333e9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.962702Z","last_seen":"2026-06-01T14:38:39.52201Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7342e4e83efdd4685023506df50500a1","sha1":"d4e998baf5423c2212d97dc74cb641afd5acce8e","sha256":"b318b1783e618e649d51f2fd8823043ebd92c8e55930eb55798d63d62661d985","sha512":"47718a51ac2a72020f8504e34d011db4240075d28b43d5f3e360645aa64de90989ef46e947a5114e0b7d0a04001c6fb7a6dd9cc0d779069b9152f5f89f471fb8","ssdeep":"","tlshash":"83d06cf636b655802c85412e0acd2c21b1108233cc9e7a0c788c6c00afaf9181a78436","size":245,"data":"","first_seen":"2026-02-24T16:10:35.333553Z","last_seen":"2026-06-01T14:38:39.519619Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b60a2fe4310f25d7824536b6a1e697b0","sha1":"b1b2f5cdda4a1ddbeb01cfdffa9bef2293b692f4","sha256":"92f8551cc981825b303bebbfa6afd1538f69600db62e9723506926b5636027bd","sha512":"5486ea1d943b63594e8c994649e10b25a67945ef222ed768c2a523c2abd5e6f2194f017a8f9119a0da2b9cda115a7a8547c16b1bdbc4d7ebfed2c766114d4baa","ssdeep":"","tlshash":"48c08cc4b0c22d242606682014bfb4e49024402770885b028c98e84c2e220b09233fa8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.958543Z","last_seen":"2026-06-07T14:29:35.459018Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4342c075064069a75b21b06ec6c9c3df","sha1":"6d219c2b352a6e62d76bdceffcbe70cfe0b9ef66","sha256":"51d786f481e0b83ee1dc319b53342d36b4b4f8fbeda9e872f89e25ab0e41a380","sha512":"cc78154423bd3125ca7754f934cde50e37e904ab59ed3aad3e349c5be9447a95a5dbc5c39eaf5d3c2b8df659c2b29555ef731de13df95c7e4351f0fe084ca604","ssdeep":"","tlshash":"f7e0c089f4c43b50ac052429766e38e89030001a6ae85b6ad9fc88887b110f84633ef8","size":353,"data":"","first_seen":"2025-10-12T16:34:39.979026Z","last_seen":"2026-06-01T14:38:39.518147Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/assets/index-DoYk-zR4.js","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6e48c85c48542870141fb21ff08eb5a","sha1":"e95fc0ecfb58879799ae3043cfa96c0bea6efdac","sha256":"4186d0b08b908e62020f800538afe666af91bee009a619f6c040ed4553064486","sha512":"ceda461b9daaa98cd44c50b2df5d73a2e4f2f08b5256cae110ca392c3474a350c7374089f12e30be9d92a4ff78e0d5897cb09d94d6b72e3f25bb5bf457d6fead","ssdeep":"6144:yjzHtbuTql6VjqXINQqhcVLNW1wYhNarQJr1FIv8483:YzHtbui6VlQqhKY2QJBFIhy","tlshash":"c0c4e842f8969a7de7b7e495504d2410724c3fcac00888e6b5fe9e162b97db8371eb34","size":574631,"data":"","first_seen":"2026-02-24T16:10:35.273423Z","last_seen":"2026-02-25T18:44:39.534694Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e3141b6741f85896e470f695de39554","sha1":"802b71c88e22a081673f7907b6a5859a06ad63a2","sha256":"1ba974e2b96fc98550eb2211073f493e17675b0e2611fa2b41774a5308118842","sha512":"c03196e5663f2a0268d574bf8fcb53aa187ee43f0122e8bcd22c4eae2835e1a531cf8df6df17dccb20bfe9ab51021ca4cf70e1136de63749bcf9fd8c7f9e9558","ssdeep":"","tlshash":"1ac08cc4a0d77d201612a42020bf24e89024406670481b57eda8dc483e620b48237e98","size":147,"data":"","first_seen":"2024-08-29T17:49:52.039904Z","last_seen":"2026-06-01T14:38:39.533455Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d7f30188eefc54566743b0560ea37910","sha1":"9ddfefbaeee03f35051d9482cea2f36ccd33a9cd","sha256":"46f138d5b096b2d454a1d06069dc1d81a79cc1865fa5b3810359947568d238d2","sha512":"dd319936b7d72e14725ad62623eec0594fe63e6e3c79d74a5ea99616d61c6afc1076654a8f8a248b61b3dcaaa20a9d807d2aa941cd20055e3d14687cbf757d9d","ssdeep":"","tlshash":"51c08cc4a0c23d101616645054bf24e59034402670481b229ed8e8482e220b09233e98","size":145,"data":"","first_seen":"2024-08-20T20:23:53.57009Z","last_seen":"2026-06-01T14:38:39.532694Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"55c7691ac49fb33b8dbe27f3a42beb17","sha1":"d8eba60ec9a2f4726f867ddd2731b18d307e495f","sha256":"d421b1fe3fba609c2649edb854dfcf2a95ab5b80e78389d6493790d1b387222c","sha512":"9dedf1eec48e262d578058367dd918d73f291cebf9e4a0e4de626f6eb3f6e22c3a391a5a9fba72dacd5d3d36c24c387f727ad19b7a05458a858a42ea5a0608b7","ssdeep":"","tlshash":"5dc08cc4a0c22d101606682010bf24e490348026705c1b428ed4e8482e220b48233e98","size":141,"data":"","first_seen":"2023-07-05T19:24:05Z","last_seen":"2026-06-08T01:12:38.076963Z","times_seen":863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0381290b89e9198fc37d2e50b5f37797","sha1":"1508e92e22fcce03f5d3750ebdfa5abefe1b4e7e","sha256":"44841ff32b4f70eed44572ac672c77bd9cb91e417284049c17468f9e228122dd","sha512":"eb0e7d0c8ccca235d9f892dc29b843dc17ce5ab411959bd84620db36ca384f98e36acd31e3658904cf86c7c20d2fa0c7efcae2a1b2a68139d47df061f3f62003","ssdeep":"","tlshash":"38c022c6b1c63d804182711010bf24d090389122b0489b438cced8082b630b28137f98","size":192,"data":"","first_seen":"2025-10-12T16:34:39.937079Z","last_seen":"2026-06-01T14:38:39.529103Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1dcfa69604091c6b34e7d885ffa476e","sha1":"6fea510b921781ce00aba383120bb1be83e38522","sha256":"a95b8e1b8b49c34e4a6d0d7028a690a10957f373a79584d0787c6dab02693a5e","sha512":"b124dcc683d061ee449bad373209adc2c48dc9a3d9664d3c4bdb890ab460a85c9872587d8f21a3fa2f074bd72046b0e8f49b5d3978ee1cfba4e0cc34b369a498","ssdeep":"","tlshash":"72c08cc8a0c77e501a42655029bf24e8e024416ab0889b039d94dc4c2e630b4923bea8","size":148,"data":"","first_seen":"2024-08-29T17:49:52.033375Z","last_seen":"2026-06-01T14:38:39.529854Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b9feffaf88a276be701798d25ec91767","sha1":"67d6f5c6a65090927fe5143dbf6f92f6123e2924","sha256":"2bc6d1c977ab4af73256c49f1a8bb00cf566dba43825851666ac68f608c0bd25","sha512":"156a0089916390ebfc44b5681c9c35ddc19f575c0632264ba3e709f2a88b2b41cfccd8ca8d5e66bd11858cebdcc365bcc17c588577b9e316c83c024965ddf33f","ssdeep":"","tlshash":"c8c08cc4a0c22e001a02a82128af28e8a024806774881b228cd4d8592e620b08233ea8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.997265Z","last_seen":"2026-06-01T14:38:39.534158Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"47540997c6538c57830fb0ce972ce055","sha1":"8565f22fcbcff847c75545c1896ae84d4be4ea73","sha256":"0f80d63f8299c46291ef24637b760be2286a9f13587118e8c3af078cbba1d4a0","sha512":"5ca74a18fbfcd3273b667769d68236eb8eb2996fd1d8d84644584274ba0d6f5d43d6a1d2aabfc806c4e033c363d1493eb12d857d14eb3b4f40ceae3b793b4605","ssdeep":"","tlshash":"a5c08cc8e0d22d101a02b41424ff24e490a8442674481b069c94ec892e230b48233ea8","size":149,"data":"","first_seen":"2025-04-27T11:55:12.998082Z","last_seen":"2026-06-01T14:38:39.528221Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/#/home","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7d484391ae36f9672dd3a7e7d7be9763","sha1":"d53f53a7b8fd10a4966a66bf4850e275378a555e","sha256":"ceb3142d25d807ee8b06dfc21328ad2535124a2da646d83f8460e529f9ce6f47","sha512":"24b179dc9998205322e8c96e434a14e5e610c4faf8a4b78a3a415d067d26b327a94be7ac5f4dd2c2f52999d4693664b17625d2bf65655ad07665e3a8c1f4ed0a","ssdeep":"","tlshash":"6ac08cc4a0c32d402606641011bf34e49028842674481b429d94d8482e620b48233e9c","size":148,"data":"","first_seen":"2025-04-27T11:55:12.952615Z","last_seen":"2026-06-01T14:38:39.518933Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gxcctw.vip/ac-chat.js?2.2.1764825825288","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:32:59.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /ac-chat.js?2.2.1764825825288 HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-907\"\r\nexpires: Thu, 26 Feb 2026 06:00:12 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1966\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2FsJu6xGqgRvMaRlg8Dm2BiqCi6dQhnpQsrsJ3pEggTIXJCyXUoR%2B3Bn1bXU7KtNxTkhI2xjXfdJw6uwwzu2%2BUluWHxtu4VOzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949dbce5adabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-01T14:38:39.409214Z","times_seen":133,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ray\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BDQmXN5f7LyR8xo8hb4KAIDkCXuPTI2%2BGoF%2Bs5Lrs3Gw%2FgJF8Yc2vidTkehqLIWGR00gEFOa4JGXCtjoIuZprTYFWozhdRW5jw82vV5jDLy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee7cf9dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35430,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2453cc330641a207ee3f2f89c8e9861c","sha1":"322ba094425d8c783eeadb5fd9747b658a6e6560","sha256":"82f6cd343829eee1f147771ab5f8731dcfff2a5c58765aab5c9aabb74efafcdd","sha512":"ae0560957904e2ed7d83af7dfaa40c7eef18c09813e21bcf3c057b126a094f710e22fac2c4ee567ac10be8d4411bbfde6e24f6384596b97e6c624cd065853003","ssdeep":"192:aqQHPtg5MMmglUCdJdtAqigrGngm9g234oRQqW:NQHP65MMmaUCdvtAqijngm9DRs","tlshash":"1af278304a4ac209d5315c9b6fe37ff05e263ac70acebcf201594e98a950265f1e5f7a","first_seen":"2026-02-25T18:33:26.223968Z","last_seen":"2026-02-25T18:33:26.679132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/more.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/more.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-59b\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPAJr7AWIJmj1XI6j4EQoVM7oprYYu96dAHEwNv05C7INv8FPWfA%2BFBtXrurX7jvBtS2vzs4s1%2F8Q3sic8IYRAWA9vCTW6WWRqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e5feaadabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63810c29f19cf606d16c0cf5fee50f39","sha1":"a78c6ae3bd094c40b29dba1ee1047ae74c6120d6","sha256":"f1d750f4e0385db35c7d1ab9f46537cd61986e2a58c72a49e21cdace58985ab6","sha512":"e07799ea4b257e23d17317e94bbcc7cd5c9b3c2f5893d3fbaa1e267811aa9b5e02ad2b26d224db1ba85af04d6dd5ff71fb9ce8b753bed248253271ab1513e356","ssdeep":"","tlshash":"a2218eae03c87058c116c7afe87e12f4fa6128ff5b504b5ab57c97341f46a4e8499cc2","first_seen":"2025-04-10T04:12:55.936161Z","last_seen":"2026-06-01T14:38:39.485431Z","times_seen":112,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msSlC5PLD%2BgDl4YYWvudIJoZ1HIPWk%2FjtFF0CBZH0IFMQFvH4f0n6rNmvaEqyZKQfqnZCdoXYIXdkevR%2BF3BvQFuflSqiMBoCeNWx6aWeStz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb7c3adabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bch\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrROH2BEkjCQvPZixxlMQbK%2FGz3fwzui%2BvdQRhsusQEhiIGBDVmOMx5K%2Bbm9L84b%2BmA%2F9uatzpsAOFJKQ%2FzlVyyPpJ34slcZ8x%2FocReUqQie\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee6cafdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35914,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d67948ff2a6773ab371281241db147df","sha1":"792caec16b1c6ac603cedc7c1b6550e702f1e375","sha256":"e0fef4d01701cbd3ec574c58f1572607edfe2ea14d3c1b213e55b02dc4e38609","sha512":"c7847005ec87ecec259345a630c46ebe85bba59e8354b94ec786f8d1e3bd2dbcb95e4cf6498e4624edac1e80fff51ec6237df98042ea884bbe9a505b4b82c003","ssdeep":"384:C1bX8bpqikTyHcqJJNDzMBOAjSWUtB/r1QunnS2PfJ3XWJHu6JDW0:CP+JJNUnUtB/ZQunnSS3XWV","tlshash":"64f2b43d8e6ac119d8738df74be7adc0263174c30acd9d02a49f5011aad4b39e3b6796","first_seen":"2026-02-25T18:33:26.207584Z","last_seen":"2026-02-25T18:33:26.683341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/c3814e70d39e45f49ea590f4c4e37d3c.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/c3814e70d39e45f49ea590f4c4e37d3c.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwGjSwhtBOmzeDn8TFBxG6k_kx5zSPF3mSIuwBNj2XwOlj2Ts9u1MyIr3eKpBomcXdu9VeO3sU\r\nx-goog-generation: 1745020290975795\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1936\r\nx-goog-hash: crc32c=aCP/tA==, md5=gGHrhAihO0V2VKsTlTGY+w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1936\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:51:31 GMT\r\netag: \"8061eb8408a13b457654ab13953198fb\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"8061eb8408a13b457654ab13953198fb","sha1":"b3c6ec63544ec3bfdce48b8595c1d0776b9a373c","sha256":"24694648b0f76973506d291e2206c941e5d55be5ea85ed6c11fc408a0d518894","sha512":"ee8c844a1d8ac78116b89df7ea1e2880e8425f7c5ff8ebbc59dc0bbb1aa963d2c49a8db92337c3709bc1c412606d88c5a3f3c5005d5c6c05b7e002aaea4f3a29","ssdeep":"","tlshash":"f2412c4b12016e699ab1060d5ae1134c54fec8b4d496ac907d30ff98eb87f588ec934a","first_seen":"2024-12-03T23:58:43.639463Z","last_seen":"2026-06-04T15:28:13.46644Z","times_seen":104,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/platform/twfxcc/config.js?1772044380221","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /platform/twfxcc/config.js?1772044380221 HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 26 Feb 2026 06:33:00 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2Feor6rf000UKol10vqrvPHDH0PLiDdrQCA6OVKQOVMiD10wwKoLlkeELHh9KxzwqKdyeD%2By2cB%2FZrKLrVxvf9E19n2iuLKpVdI%3D\"}]}\r\netag: W/\"69311a90-db\"\r\ncontent-encoding: br\r\ncf-ray: 9d3949e079dbdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bf4a50be346b56bbb39bbe0bc94cf4d3","sha1":"1da9457833f34ed3f043b0c77d7f8d35fcf555b5","sha256":"ea1cddbbe9b03685c2faaf79959af0139c3c5e3ae0f8eaf6409a4f026bb187d3","sha512":"6dd2d0596734826a559d310234c48c1a8f8c507afc2b656e64bd1d8b220c2f92d3b6911cf27912e9ef6f4940bf409cc42b9d761afcfb845f2c045cb195ded755","ssdeep":"","tlshash":"82d0c2f626b655853c44412f4ecc5931b1519237cc9e761d788d1c00af9f90c1a78432","first_seen":"2026-02-24T16:10:35.262693Z","last_seen":"2026-06-01T14:38:39.508156Z","times_seen":76,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":444,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/cooperative.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/cooperative.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-13b4d\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaGIa%2BzkdEr%2BZ0aJHQgG0YhMQptNfLKl1Xl4xI13DmGQcsRIFA1DuI4wU%2BmQzK631YC5XeYz8J%2BjfjnVz2tbCJGWToP6MLLm7OA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e77a9adabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80717,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"290c86d36f158d49c3204227be9accd8","sha1":"447efd04768b92065766196f81da6c4b6876773c","sha256":"d9a2b25941f62153280d62d6605f788cbbf8c5630c212f5fc1c04d86af7005f3","sha512":"6a2f9ff25a25902e91b99f3a8c5871f5e82d755c3366062ad5ccdb86e3926208a32c536d73765111f5192c8d35ebae60499a00450fb3b787f2bf52cf6aeb7ff3","ssdeep":"1536:t7Ad+P9FV8MahIfiDJInr3Ya7Z1uMslhso/F:t7P9Fx2d9Ir3YsZIMjcF","tlshash":"cc73027ff819cc0bd6018a4ce88dae066c18be195211ca3f7648794386589ebd63d1bf","first_seen":"2026-02-24T16:10:35.271118Z","last_seen":"2026-06-01T14:38:39.413459Z","times_seen":62,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/32722e3696ee4bd28f72666655705db9.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/32722e3696ee4bd28f72666655705db9.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxzh3dbou8TN4HVkQRoF0_0ZYEofVZTkb7vIpQeeU7g5cUuyZkc65984H2GktpVDZdY7OP5Fzc\r\nx-goog-generation: 1745018990111126\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2274\r\nx-goog-hash: crc32c=m9RbuA==, md5=Z0sJmfYIMISipLHYsg87wQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2274\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:29:50 GMT\r\netag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-06T04:02:55.304252Z","times_seen":638,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":105,"dns":15,"connect":27,"send":0,"wait":58,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/fonts/DINOT-Regular.ttf","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gxcctw.vip/assets/index-aTGb2v-X.css\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\netag: \"69311a90-b6ec\"\r\naccept-ranges: bytes\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOAuI%2FUBwMwF8v9xd0oRXuRXTeh68ri2XfsRdpaOHbT6WieeklBbsH1NPaTIuo1CDlq5zOrtW1VN5yyAi3EgqBeLcgXy7FcY1J0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e7ab35dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-06T23:47:44.173744Z","times_seen":265,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMKPq0ruezXRjyJP%2BGxFIdMTvoTAbeQSaK1v1%2Fp1ogS7KQuzTmCE8yPTZPUZJ53EN%2B77KTh9KqQTu5%2FmmojV2paK625%2BFhNFwXqdmL97J%2BfR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb4bdcdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpES7j%2BM3Sdy0o6GyftyBC9awYQDjYOs%2BmKRS3%2BLlERFcAxxqIumojcVdsqpd9f2mPHP9VJfAy4KACreFkHLSENX9qoA6%2FHk821K6KID7zht\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee8d15dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42533,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f15b79481e1e5d7a9cad6b16f25582c6","sha1":"ed826179186eb822ae1c30d891a929ea0076d644","sha256":"d3fbb6047128971f2d7457b6b361fe2231ca8e8cdc3c2b2d8718e97c1efa0850","sha512":"26c537d3876a7f77c8b75915c56b566f2513f7acb2517a554bee85cfe48b24ac1923a36ea50a29edfb947dfb816236cc05afc64604e5e314de0c54e0708311d7","ssdeep":"768:9r51Bl2ueYs9cB+TvveRv4chFLPUfoGhWDe1XXoGVUOb5yjKUiOfPl/yT:9r51Bl2ueYs++bUvVLPcoGhWcXo2b5yk","tlshash":"581376304a9cc2c9c531bd9e5fb3afe4071239c706cd5dc242ea0c556a54af1b2a5baf","first_seen":"2026-02-25T18:33:26.199188Z","last_seen":"2026-02-25T18:33:26.688588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/87261c686fde4971976ddc5b88358cbe.jpeg?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/87261c686fde4971976ddc5b88358cbe.jpeg?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWw1R0GUAljVmZAqKqRlbWX6D3FIu9i3lvVJP71Ih_-6QcbiyylbP9bWbJr_WXyViY6RPCb_za0\r\nx-goog-generation: 1745018964344619\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3261\r\nx-goog-hash: crc32c=YMCRAw==, md5=3X2Rj9yGkWKUNmQMIwk1Eg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3261\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:29:24 GMT\r\netag: \"dd7d918fdc8691629436640c23093512\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":3261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"dd7d918fdc8691629436640c23093512","sha1":"cdee6f46b4d5c790f3aa2c982541c7a85cc053ed","sha256":"9b62ba1641b776cc54c19c6cbdd6ba513943e00f5ab98570bcc5c3b643920228","sha512":"c793a7cf86cce56cccab025a402050ccbd7c0f2422d539858c329bb3b331a2b579d76db03e6f7ebd78a4cbfa90a2c873978238507dee8c6e7baf7a0109212fba","ssdeep":"","tlshash":"48616cd6795349161ce77d24833f066c8ac50e1f215e50956087a6ba39df6a0e0838f3","first_seen":"2025-02-06T02:55:20.496923Z","last_seen":"2026-03-20T19:46:41.804599Z","times_seen":44,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/assets/en-Dbrzt6Vj.js","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /assets/en-Dbrzt6Vj.js HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:23:44 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311ae0-d7e7\"\r\nexpires: Thu, 26 Feb 2026 06:00:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1959\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6hXswuKz8sparO1kffn8uwSqZaaW8HP%2BHGkPHMu91IOA%2BjPYLIy6NAN%2BhbumTYPaut36ZEO2yJxhUKjg8NMKKW5Nt9j0vHv4Lc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e56d00dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55271,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (54826)","md5":"fe50af114fc5e587f6c79c2be1e6273f","sha1":"9d02e02462df7ebc01a07cfc310a688e3c5ed53a","sha256":"5c2b59f8a163fabe36341e65215793395c096e4fe4dc18b4591707bb319d7659","sha512":"da633e18c213c8ac5ca71a40ad8948ad74b4fbc35e13a0f4465ba599c527669154ee5a7c6dbbe643c44a188e8e8ac6afe6ed8afd6448c1643ca118059dd6073c","ssdeep":"768:uVtZcEw/oPrZOuiUAtgzUgJ+PmvsYJ8HnxJou4/HiA9JYOuy:5poTZOozUgJzsYOHnxahJ3uy","tlshash":"7f43f88dbe165c9a04e3237a78ce6a6120f505c1c358881f5fec85fc83e1b6767a7629","first_seen":"2026-02-24T16:10:35.270307Z","last_seen":"2026-03-20T19:46:41.750165Z","times_seen":40,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtHXmAuAMll5W5JsGf1Z%2FQisDpEzYWhBTwufDvc9tcLzJ26Ev41KxujX5OV4Qz3eFGfSeR0Nm9aTmj4vkLkHO1PceoEmQXIFqJDenYv587i9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb7c49dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"eurusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=syfIh6SjLOd7a29AVIm7tOD5CAu9IVZozRrF4pfBVbIsn8kMw4%2B9xaaPJ4%2FzBeZBgCGYUy%2Bdg5qPoKX9pGQT6mvnhxSQXhnO5LMdmjDwwIgK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee5c7ddabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42543,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"89956a12d843682544f6b9d31f01e2b4","sha1":"acdb2f0def4bf82fe714c43455d22fefddf655a0","sha256":"1044167e5d8a6505a607766fdaafd4ba50f97b900d1b9bc6f2845042c00c4ab8","sha512":"6ad311cc4dbb8a5e35d8290e7d70c455b5f8db556c4d1934829cf9c4323d08d859b329817093e109d499ce42e2ae4e4d1316925ef44760e09e68a231a83d9add","ssdeep":"384:yrfLd7X1mbUIwMVdALSuBxiDU7oGGpvNHjcKV9TP+3Q6:yrj5ewIuLSGxUU7oPtwCl+3Q6","tlshash":"211380345fd8c198d6318cc51fe3aee07e62f5c3a6ce6cc3c5d92c18ea902299167796","first_seen":"2026-02-25T18:33:26.195204Z","last_seen":"2026-02-25T18:33:26.691356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/b6a414b3b0e749cb9efb1021dc8e42d2.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/b6a414b3b0e749cb9efb1021dc8e42d2.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWy-bxmPEPo-VONVZdXuNauacNYpUR7EGnTjnjkgdJhQm02253bReJpgoCK-dUkvHn-ZR3h6-IA\r\nx-goog-generation: 1745019003474375\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 14268\r\nx-goog-hash: crc32c=1eE/CQ==, md5=XZj61ZeWnKYLLBULcX11wg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 14268\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:30:03 GMT\r\netag: \"5d98fad597969ca60b2c150b717d75c2\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":14268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5d98fad597969ca60b2c150b717d75c2","sha1":"f64fa05a8ddc3ee085768f308db5bdc1fa45dd6c","sha256":"47373b88482223e17220c976db2859b2ad928c0a8725a81a859371ca1e052a81","sha512":"b0ffafe604e293786aca6a044f6147651d117b31afa201c051689b499e25ddacde63628be24e98a99b55aeb67676d6121c182443367789b05f9535c3c2aa0231","ssdeep":"192:FNYSd3bjNhYk+506I3KsuOr/iYmT67DVDbnbQD8/QiXSXfV/+7wDlb+St4:Fhd3Nh06/iYxDlrbZ/QiXw1JDlb9t4","tlshash":"9c529e5ccc41dd1d910a2a35d37c29f0892290bb230ad0133a8defd5b3993815abf55b","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-05-22T19:23:47.182691Z","times_seen":101,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":99,"dns":12,"connect":30,"send":0,"wait":60,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyjQzOFJ6enSahGi6WEZbtLx2QXC94Nn9ZmBg155BzQfUajE7_JoUI3UZIVNQRqGnRvuu4UiCU\r\nx-goog-generation: 1745019091846695\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7177\r\nx-goog-hash: crc32c=KbQ4+w==, md5=umkw+KKOd/Vlmi9C6Cp6zQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7177\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:31:31 GMT\r\netag: \"ba6930f8a28e77f5659a2f42e82a7acd\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7177,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"ba6930f8a28e77f5659a2f42e82a7acd","sha1":"a8486aa615dcb5fc601f66289b55a5cdd08cd8d5","sha256":"8bf7252f758e4f74fa910c3f1935501125d6589f26e2e2c8f397b3ae6ec0fe53","sha512":"35ee8e31b81d5474c5f1178161d3f908139b65e1f33bc30db61618cf0d4555bb38d0e7a6ffd06d7562ca41f51ab216b37320bdb29a968c891badff668a924051","ssdeep":"192:BnyBvvQqY4kabfz3lryvlFnkmnXGCvY1JBAQ9:By5JY4kabLZqFkmWCvKBAM","tlshash":"64e1af75df14718adbaf951d0e9e4440d2961a4a5cb2c30ef10c7de2eacf422531e836","first_seen":"2025-04-17T23:40:09.002327Z","last_seen":"2026-04-07T11:52:26.909048Z","times_seen":88,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcEdmAjgEqpPZdl1jFku9rDw59mRCTDG3pF7LFTYe5181ohRCUewOPiwzMXESqcRCZybW%2BhNt0r1Tq7aFW3HeD6CyTOqWfCiqmUsPrHCVGeA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee5ca2dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40653,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f34e40ed6735a3d34a56f01c8441d254","sha1":"8306a8de0c11bcdddf8cdfe4355352d37d3bdd37","sha256":"3de4c00be443aedf09f345c2b5da40d8c0cea0e5264b38b59db81fc08bd02a1a","sha512":"f0f25a116c7e09e50bae477d4b4e6bb6b8e4aa813b02ef90d592dc9e8af910df9bc3c7dd92448e79d0c1561b910a98247981f9e2544d9b3231d9cf40237fb777","ssdeep":"384:+xycH5Vj89pH/Zx9Nai61iBydrJiBd6Fm9e5USgFo3IstIixh6f3SAbUXmQcZGp5:+3rj8thL61X1ekoQUSgVyufSAAcg1b","tlshash":"2d033535ce84c859dc774cd61ff3fce80a2a33d302deac5149da4a1179d4e2ca52ab92","first_seen":"2026-02-25T18:33:26.694249Z","last_seen":"2026-02-25T18:33:26.694249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/df71f72a24c8464082c7b899e80626c2.jpeg?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/df71f72a24c8464082c7b899e80626c2.jpeg?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxHfUzboPQPxK-8y-KI8GvaFh266cvpujZXgLso5WZOXHDptrQ-FeWtgSLA3aBgolF-43E0dLo\r\nx-goog-generation: 1745019025514851\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2839\r\nx-goog-hash: crc32c=WDrOQA==, md5=6MtyVZQjmdQVxtDIhxjtEw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2839\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:30:25 GMT\r\netag: \"e8cb7255942399d415c6d0c88718ed13\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"e8cb7255942399d415c6d0c88718ed13","sha1":"b06fdc75eb1e209cba9fad0bd5606a6ba2c459e9","sha256":"bdf49f472e48c3909baf009837595007a60f504776cedde9275226178397049f","sha512":"b8ea7212148eba88461da09375de04cc7f28e5f8a6487b8e9decaff5037acff542156ddeae584aaf45712946ab95e11b7e1b39d97f1f3b41f3faf2c84c70ffcb","ssdeep":"","tlshash":"0c513b9b6ba46137c8e04a3217503a788f060d2f9bc6dd7670c0c655b9617e2e838e0c","first_seen":"2025-08-29T09:33:23.956448Z","last_seen":"2026-03-20T19:46:41.757855Z","times_seen":41,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/assets/vendor-CpS3FrFl.js","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:32:59.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /assets/vendor-CpS3FrFl.js HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:23:44 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311ae0-2229af\"\r\nexpires: Thu, 26 Feb 2026 06:00:14 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1965\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BrDw9W7%2F4l3sZbrHWHRbTpgpPEHldqE0YVKQZeK7v3nAZq7OXv7hlceSj4lYjr9XZUYG4GqqQqbRiM7ijtZLA%2FMwrkfyc%2BhAJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949dd2a3adabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2238895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0645d6d2b48d3980f9cf17cac85d13b6","sha1":"60e02ae0bb01f7fa624edaa696734ac43975a465","sha256":"f8558e5500eb1736d6167b88cfd33180e484b08e9089b36a9452b1d8ce9231ca","sha512":"581deded0fd745691703a370a49cccad4e41d1d1c1bca4c6ee7370d65eecbae9c7a5011eeb23182a8ba522d6086433dae1ccc0b89527735a89c05431b0bbf195","ssdeep":"24576:FN2LD4rA7kDbDVETSxXQZWAacs4yKd4vVa+URU41:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URP","tlshash":"732509d8b651b03143a725a5007f050bf33a590db44f85a8f669e8da7cbd84e627bf38","first_seen":"2025-11-01T17:44:45.831131Z","last_seen":"2026-03-20T19:46:41.751492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pn%2Bf54V%2BomRxAqveYDrj355sgxY8t%2FML2W9CfpdJnjVea4xDnNTC73gOrwEgOv3OA8ZgkkmMUSMHx1Sycm3OeS6eFNOX637xOFndjhJyBWVk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb6c0edabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/5ca8998ce9db42db9305ebcfcca0df4e.png","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/5ca8998ce9db42db9305ebcfcca0df4e.png HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz1NhOj9Xvw08egN2zJZyntDVTOK96uGBGIcT117khI9qisVi05imqNf7UQWMkMPOJ6kStlD18\r\nx-goog-generation: 1745216620575234\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 548460\r\nx-goog-hash: crc32c=KghPuw==, md5=04fr7KSJInFVg1v0TCIc0A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 548460\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Mon, 21 Apr 2025 06:23:40 GMT\r\netag: \"d387ebeca489227155835bf44c221cd0\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":548460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 494, 8-bit/color RGBA, non-interlaced","md5":"d387ebeca489227155835bf44c221cd0","sha1":"d67185a3b8f72e950e0a0c225f2afd5816014185","sha256":"1e066e832b57393740a83d024d8d99a87573eb3e0e4d7dea9d026ce30747d0c4","sha512":"e2322a68f9e9a69fb6ba5cb36b825afe173275c39f9a99d5bedb3fcf5ad0bc4e4a2d4c561a2c47f2533ba34f021097dad962e98fc4f3c6b3b5f60bdff34b6c91","ssdeep":"12288:hc2T1bkJbVrdpl1w09PRFKavw1IWj+AnU:hc2TObRpjw074PbqAnU","tlshash":"47c423683ae9c1c32daa9c9f503b58e5ea1097f8ec7117e6b1c7b0d170b5e880125df6","first_seen":"2025-11-01T17:44:45.749561Z","last_seen":"2026-03-20T19:46:41.805871Z","times_seen":28,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":36,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/type/defi_activity_type","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85wbHqFQ2EV5QK1gN1MYBOHJoHu5HSuF5VvUwayvEoWVACDz4sID3nvCjP9Um20eoJNfUYjaOiRaSANQXVSTsUjzov%2FMZ800DWKZjU6CS6k0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ea3934dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/type/defi_activity_type","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oDicbtxTShmp4l6WI2vPp6XJ0U5zr0tdMpEv4SgG86y5n%2Bv6q6%2BysUvXY8pNBb0yMlQYJsSsBsHTlkvOYGtrUQWhZxHulWAMpGtg11q4SDT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ed089adabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"377547c8f767a60f400a02dae63eb33a","sha1":"90cd91d3318010114e6daa8f9e160beb4b0ac382","sha256":"3236498fcb921e4ac10b93fef88ecfda5469b4e2a3be7512090865a46e87d800","sha512":"a0116018b798349f620642b15c673ebf74df3b2a7eac2c1e0afc994b91ac5333b2301804efeff7f64544fd95553001b4d4b19a17c8b8ce7eef63218a74ea14c8","ssdeep":"","tlshash":"01f02814393dcebf095f65d745ec78183adc152b94e0bc60a8ab4f3c6be4171188a21c","first_seen":"2025-07-27T10:32:01.636668Z","last_seen":"2026-06-05T10:33:32.036291Z","times_seen":172,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"doge\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJDu1Wrqvrsn230q3c2JT3dqiAofre1S5%2Bi%2FxRYGnci4eYAwQ6CXqy9A8uRNppA8GHV3hpereqr6ep1P4Ku1HygMshk2d%2BIFWc8nfmq1xalP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee5c87dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40879,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b518f923b7938c2180b818ea3f330fba","sha1":"f6d276ca399c3f3b8917de81df48a685df756459","sha256":"3bf8c800685ae4bdccdae535969ee6a699c31bf7d33187893a3777b877f1830e","sha512":"fec44607da3089704055a20f3b6cab7337dcaea827fa0a302da6deebb4fff57ae64f35b91ce7296e8d35a5dbe21270ced262ad05d97484ff2e41bbb2ae300fd6","ssdeep":"768:knnuXg3/S1okKUSZ9othf57qb+pV01W82qNmGjxFIhjyIICwfRLmfaukwBO4YQ7L:knuXg3KutvZ9othf5x","tlshash":"770395346a94c3f5d4319c862fb3beb0262679c34acd4cf511ef0d08ba4176792a9b76","first_seen":"2026-02-25T18:33:26.700287Z","last_seen":"2026-02-25T18:33:26.700287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/fonts/Arial.ttf","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:32:59.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gxcctw.vip/assets/index-aTGb2v-X.css\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\netag: \"69311a90-ff9e4\"\r\naccept-ranges: bytes\r\nage: 1965\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SklqX64A3wfqt1cJL0ZKyEtxJmfHxV3UIJyPHpLtEkw4CY0dBhmLrhKkJTbL5s9wE%2Bj%2Bf1jkY8R8p%2F1q4FF79gtHMKD%2FPJsPqro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949dcf9c0dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-08T05:16:21.720932Z","times_seen":1329,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4wueQ83gQLaGXEeC76A8t5TsjWLdfgs5w46hQnk7nM5aycZRe3ePkVDBRyz%2FqtXOyTvyNISqURo4WREflVowd03J2ZLa%2BYcN1c11tm8fUtp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e6b8bedabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"daaabed8316caf524b9ebcf4a9a0b7af","sha1":"6c8990336cbe5f189726472f30ae82080f0d2fde","sha256":"89a2ba4723885dcced600670543f69bc79783a92a228c513a2ffcb77d8ce05d4","sha512":"3fbe3809df6b5f2f44e277a0dad790f269422b62713b928e90c55cd89b1dbf5e4b5e0338a9ca5be18107ce16fc538287aa62c93f2a628c1a747c39eb644995d4","ssdeep":"","tlshash":"14a02208ee0c808222030082020b020080f0b08c23000b08fe8ee3b0e2002ba308f888","first_seen":"2026-02-25T18:33:26.704055Z","last_seen":"2026-02-25T18:33:26.704055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/ai3.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/ai3.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-1baf\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQN2L5W2HGbgMoRabgUT1QUxbD%2Bg%2FNiP3sKVF%2FgZpkH6DO%2FWw7IfzU%2B70HxGlhOzh0gAi8blaGOGjsE2R%2B7YB6YGRBxK40W%2Bfbg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e6d927dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7087,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c53e7b1117a8526f6eb229df446cc722","sha1":"bd13b10b3d466c27cf406fae1a07adb3650dfd9e","sha256":"05d9270b980c401bbc75d3374fc10b459f661b3f5420d168daa5369d8fc8c48c","sha512":"0e693efa9349078257f94a89a7acb5f3d892ceba824440516c2c8fb88b71e937923ba1bd10b020d9cf2e80985fbd5f0ddefbf9176e6ad341a17caf9dfc7da856","ssdeep":"96:UN24KuLu7W0X/YIRcOMlit6YO+0hR8Kob/RfZcPRDg4rQA2EOAl6NkNLW4nW/1do:skuLu7CLOMlit6tvhRLlY5o","tlshash":"17e1652ab3aed97af148d3fcdb008435716640e3a951d261c2e5be1f982509d683e9c3","first_seen":"2024-11-30T14:01:13.939903Z","last_seen":"2026-06-01T14:38:39.487061Z","times_seen":141,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZVAmnCWarIJH8NsPwRh3F9eNgiAHSEPaxGH1qntxkQZe0H2URIrEEVW6jL4HZsZBimTVXzVTzzjKi9uEeU757ZxnzkSDuoqKcIyDtTXLoGq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb6c27dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ui01i5R9rOfmIT%2Bqyfi6Rqu4sC%2Fkd8oTkpn82UjepRHjh44So8UnK51IL9%2FBMz3w69ZnPrJGkzB82kATeIQYuGZ5psElkJUpp%2Bn6m59KVVxr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb7c40dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/svg/dark/huazhuan.svg?2.2.1764825825288","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/svg/dark/huazhuan.svg?2.2.1764825825288 HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a92-b39\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjrNWVffQ2Jyom5dzJWYkPUFDU35Mpu836p%2FYjC7b733evpnKqS9tgjBPKC%2FNqXH63H9rMdQ0RmEez4SuuRISDLuBooL1J1pSPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e60ecadabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2873,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d82425ac5150ed01e5b427e55abc3f","sha1":"7627b7ff42018aad3ebdf473e73e1d93a5957558","sha256":"c8e61f65b639b0f4753bfacd166fb29a2191a9554e53c49fa02479af78bc36a1","sha512":"3ad79359f100f517e60bf898fbeec11276e119c4b3668e59a8b883c66a9d3686777f6674e45de7b5cb5dd32a598bdaa5fea5a70c83f158df67cb17e545982346","ssdeep":"","tlshash":"dc5186d4523d939de0089fa4e7b631c6353a30e737d01690f2cf12576b260ce458d9ab","first_seen":"2026-02-24T16:10:35.251591Z","last_seen":"2026-06-01T14:38:39.509521Z","times_seen":62,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/enK_.gif","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/enK_.gif HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-53921\"\r\nexpires: Fri, 27 Mar 2026 18:00:22 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1958\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ou7huIarYhyiPEfB5ftDtKZR9TMGkIhTTsKVHgEbCQx4fdaVM7CQ%2F7yFH%2Bt7V1NgHL4Yup0Gmplu3qxAtemVOx3f5i6eMiZZSxE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e6c8f1dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342305,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 800","md5":"0c213c1a489e987b78d7328cfe1bd840","sha1":"41e5a53e41ffe0cc4c99e8e98e0eb750117e9d18","sha256":"a4594eed78ebd1cb2ad30a28e026fad3c9046ae5b1aa71dec4c6b9702c12bbf5","sha512":"4da3afc8eb4803cff493835c4cc85ab57fc816f70943978e502b55736ada97b1858a8f1b1a6e65f150d266f1c42bf570ab441e951217aee4f2801a1262e3118d","ssdeep":"6144:2E/igWxC6ej+F9A18h7+Zxuvve8n37lm4Wl+DVAXQbo/N2mAbwBI:5/igWo1j+fA107+qrnrlu8ZkN2mtBI","tlshash":"da74021ed12702b19d3f1679f41f5ac8295fa92c05323e278ca0b5e64a4969f39c4ecf","first_seen":"2024-10-31T21:21:10.450985Z","last_seen":"2026-06-07T01:05:18.921393Z","times_seen":193,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFld8i6UY5F5Dx71NT6hfPJ3VqJUnqlthsFZXjBNqHVGPkitI5s%2B%2FnIa23smIwHH%2BSltwnuxtEd%2BtnKSmvpZvH59eN7gBJLouNOU4gvqQ5ER\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb6c30dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/notice/getAllNoticeList","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8HoIIpTw7Ej1vVZNKDOUqUigot6w1sPMRJD6Q%2BqVHRTmaj1gQ2zUzG0N8ilxebhf1tNWfsXBWzsW8hExju2DwKCO%2BHhkoln9xLnkXjQU5gP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ec0e26dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"54922af9694d75e28abe73387c30aba3","sha1":"567c6870ce13632ea87d69cdf9a457a06fbff526","sha256":"8e3e7a20f025ddf20928399993472738bc5ca08088f321d549c9df8e2d32d172","sha512":"218a0ff8a786c805b918e2f2b1bb6feeb37f62d1d28a75f6e79be5a1b0ce5864963152da2446c26613986616851c5c355550fcffa34482a4a305cccba0abd155","ssdeep":"","tlshash":"3221a84f217c8e790c1a89c321c97ccc916e0743e2a4cc74876bcf6c82f15ba5b2b608","first_seen":"2025-11-01T17:44:45.836729Z","last_seen":"2026-03-20T19:46:41.73868Z","times_seen":28,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7C%2Fhq223wb%2BUbUz0sAih8Rg9%2BDHolO%2FPJeRXs1UHseTsb%2Fpw38wT5kb0E8oeVZNcANy2PmqIFlHbFr900j95MFvwNoEkdnqHpRRuICGz4k%2BX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee1baadabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42351,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a79424a363dedd6efd1b322a870cb4f6","sha1":"c5f7049ce2f418739473f106f85e1935697201ae","sha256":"25da14d6e6c6f3800b324770abbdc50529dd9802d126f56d0c6250e503e74373","sha512":"5c926754e54c705bf7427f3a4f716bb582b09a3221328117ce138b04245fe71d2d0af20f8483d46d21a329e530d90ec41a6f771f092630eb5aa13a04cf1e7170","ssdeep":"768:T/Bwqg8xUOh2qlnRUzJImkTYJIDf2Ggzy:FbxUOFeJImkTYJIDf2G","tlshash":"801314b0fbd4c1c9e83acec2afe3bdf04a1637d746cd8d8515ae45119a90232d568bd2","first_seen":"2026-02-25T18:33:26.709928Z","last_seen":"2026-02-25T18:33:26.709928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/ai4.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/ai4.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-fde\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4AOiwLsvudIhoJWa3iSay6KIeh9TdLzl5ODVmXEGAMNA15aBhyRC0pXsajQ3kw%2BVN7Nw5OKHFLgizQoaCnQHCRTdqkbzxFp4E%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e6e931dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4062,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f36289a67c02534f334b7a7ba82586a","sha1":"ea680334caae72af8027d42c36702e6bb6929f64","sha256":"0b143b746b8b6034e6dcb73cc78fe60cf59e42a9cba1a6cf605045a9c2e5bbde","sha512":"82bb649678fcb6313c60455f6cd283a1ae047d0f8ba4a0508cff06081b2c231702ddc603c823ebd3ce17eb4cd12b8df28d346c8a04faccddf905b79979f61aa3","ssdeep":"","tlshash":"8d81b62ab3b9e976f104e7b8d6059830355a48bbb5814250c3f5af2f91241cd1b3f8eb","first_seen":"2024-12-07T19:52:26.441151Z","last_seen":"2026-06-01T14:38:39.49296Z","times_seen":141,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQbA6hT3xvlO%2F1hr9AcOg9AqornAhc%2F%2FcpnDqUb%2BHB0glW4m9K1nIK43ZteGKzwUPwk3qFsBp%2BcMZC19Wy6AHunflfWh1n0Y4lMNyTvCEsKN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb7c4cdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/cfd.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/cfd.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-4e6\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EuJr%2FxT61WxIN5e5tJsKEWcZaQsaX%2Bw3iHKRqrhWFkJWBwgxZbfQO%2FOps7c%2BIFskZQ8ZUgtfdywrmJE55%2BpNObeRfpY1cWctro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e5fe89dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9115373205114c25f64dce056a8be78","sha1":"13d9c2d8ebedda0987493bec5ce299632f7acbab","sha256":"22269448e0257c0fd850d7c54387dba3d5db86bd4f3bbf651038653801c74a05","sha512":"399719ccaa22a2f3800f0daf2a973abdbdb84b6a8f24f546d49012362852772865eb78c94870511816b777f0354a9d1a291b39737ecab05f77f4cb322647464a","ssdeep":"","tlshash":"0821325b7386f190c5475b90c463b1a230e975faaf04c1958e49efc5a20e0bf48ceea0","first_seen":"2025-09-28T11:01:39.572211Z","last_seen":"2026-06-01T14:38:39.455097Z","times_seen":78,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/ai1.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/ai1.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-2d31\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxfe9xxIX4GgRBDVSNoXZQ5EWUk%2F8%2FDlR12t8CRIxJWGUUJrFWYrdBnZwoEfXjnITjWMpExF5JSnXo5Eq86P0ZbtGo39Dho64NU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e6d922dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fad7f348370ad25512357d8c7c20b3ac","sha1":"a451230898d83bb5a76762e1f4bdc9deccf49462","sha256":"b6501107cf61530810ec864b8d58f3ec21275ffa0467d01a7a969663588158f3","sha512":"1510f8c8cf0d9c49b23035370f90fc58d88300d3c649ecc29b8454296f967c16e6cc8339eeeaabbd6e6cfb1c9cacf26d48d06b41d1351070bacef700092aeb91","ssdeep":"192:oreDaEOJ8rpKaEJtym9iiSEYrydZm94rUD3o:oreDWJ8rpKRxDS4YE","tlshash":"4132742ab3aaed7af140d3e8ca42c035215556e37641d1a1c6e06f6fd8201cd1a7fdcb","first_seen":"2024-10-31T21:21:10.384677Z","last_seen":"2026-06-01T14:38:39.501865Z","times_seen":166,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/cooperative2.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/cooperative2.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-84f0\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoAX1tI5b3pkb1P8z0dkqXJSyfuKk%2F8TwCNDAQloDYrqJK3XfvnV%2FaRRwjkWtyHU3k%2Fk7HE1RK20I3yRBRZuEc%2BIGhC5QYQKHqs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e77a9ddabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34032,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc6256de7476e170f90ebf32758d40a1","sha1":"3acf9122d542d0db54b5f41f5ee0294d3f20823e","sha256":"03e40a172533b8d9fc4a1eff261af639cbfe5ba5a38bacf543e5924fed4ae7e9","sha512":"e68aaaeb9754eb430b00c049a3ba8130f72f746ee099af796d7795df90e6c71b6e6472ee63e54c53b5cc19059e4ab9ea45d279f7726b292261235298edfac324","ssdeep":"768:Jfs921W6+Jr1T/s8msmsCdvPtvMW7MOKKiq2d6Y/ML0XwUwCvrD:Jk9217+x1Tk8mDsaJx7MOlx2Mmk0Lrvn","tlshash":"d1e2e078f30a1c4ed7d1a64d6725ef68bf07a52fe3acd603f908a6014187d835a790da","first_seen":"2026-02-24T16:10:35.2349Z","last_seen":"2026-06-01T14:38:39.49734Z","times_seen":62,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"tlm\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xq32hU%2F0gmuSjI2h8roXAK4LsKzh4h6ut93dtctjEUbgEFz8mST5eg8cZ2otd9wX741QpDRXiDDuzdJY4pnkh%2BBU%2BKXEvpcaR%2F%2BXnRkCkGbW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee5c8edabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42405,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"04e248cf79b28fd70372ce241cd225ff","sha1":"d71df03a407f9672ab496724adf0531a788f25f7","sha256":"bbe9945777b3c1ff1720f27f20e106c524c05391b09c6b0e166ffd8221cc7e79","sha512":"cd7159afaf4c2e8a09e8a8bf6d4c7a260b1065668eafeb038823a9ad5d5496d868b6d5f2c39d5e2b2be164347494c8bc9f3c489fe1dfc57aeec75acca5bd5847","ssdeep":"384:1aNKyLEtoK+irQGixZSeadU+gvft699IKjN/n:1G2QGi/voU+gvY5R/","tlshash":"ec13e8f44b88c2dae7317c8a6fb37ea1026335d74fdd98c1119a0ce4e5502d1b1997ab","first_seen":"2026-02-25T18:32:31.38101Z","last_seen":"2026-02-25T18:33:26.715593Z","times_seen":4,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSoAc9GRYnX6FnMlf4QUj4mjgFaJNTIQVgrJoNIB2DQt0zj4xuGDQHGvW6kBkIJTKvtpvCkRUFnojw09s0kr9R%2FVR1Y92H5c8PY543Ewf%2B0i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee8d0fdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41725,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1a9745c373431011183ac28974f236d2","sha1":"0884049278abe45af237a61cc840aa8de131bf0e","sha256":"53e8e42daba3db37f092904ef7a533e8b1dbdc4f8aac8380da29e90a33eac54f","sha512":"b5dd912a00d6b93ab830496ce5616c61b5895af763450444e445c982f64e87042e99a597a6a9f2308a49bafa363f9f8c1dae515f6663fd93e6de6fae3b65b334","ssdeep":"768:9b1OGYaZSueITk7RvgbShv1TWKgUxzraZYcwsa0deJEdASl+5t4RULrAJfNT+pr5:hUcQtvgiOp/avmT8JLn","tlshash":"7f13d6308fb5c38bd5319eea5bf3bce00a6735d74acd4d16819d090029d7f2ba925b92","first_seen":"2026-02-25T18:33:26.210177Z","last_seen":"2026-02-25T18:33:26.716352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/getAllSetting","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZ93ND64g7r9tOnSBK6vMQIYr6Pa50tnKVaPnNC2%2BXpvm7M10CmjVJL%2F53gN4mbaWU2G7EP6ArIQ9v3DHwb2Z3vwTg%2Fi0dCYDnYIvG5lEi4l\"}]}\r\ncf-ray: 9d3949e0c90f79a6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":30,"dns":1,"connect":8,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3GdPca4TY5nHkmiZd3o6GNTstz9eYe2tFWpFJBzgT3siOf86J%2BPPlSqggYeHJ8MuKfzc48xloKpQMCK427T30AKJBGtQeJy2pBnxCA77w0D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e53c92dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/ai2.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/ai2.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-8462\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HS%2BDohd29VN2rNPx64dipWoA0IMQLrdsswiQ8ifR62TXvXCM9%2B2SzDb5Axa8wGlyjy30MABKidMjhsMBOaldxQkFwB88hlxtC9A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e6d924dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33890,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b527cb50c44f791e4c1bdb582c296","sha1":"b9d5e0c2a1aad9aa06872c84bd6c1ed50328bca1","sha256":"be31898c9ef6b0f26bbd66f381e89c250d44dcd5e7fe879ac913c3cbd9fe5bd4","sha512":"3c9087d90c856f7440339fa714c342e2583abe629991c6da2e1a8722b8ebb81e41f1fab72f693c069f7eed9566efb88061b35ae3da59b0d44bf5389471f46a6f","ssdeep":"768:b+F76xoi6BmlUAOAzlshwrePeuvj3ubsaKkmZD:b8PRAzlshwqP/3ubsa3kD","tlshash":"95e2f1aeef52980be9560ff9823761f113fb0bb604970c26967067c394d83b8355b49d","first_seen":"2024-10-31T21:21:10.414612Z","last_seen":"2026-06-01T14:38:39.426174Z","times_seen":167,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3h4Z4pRmaoZ%2BmTF7nPUkNt2zNlucYGdO0yRFZQWDjNWlpktPlxS45y4gf2f0anjqPtzlYYTB8UtV4K35Q48%2FQoV0kdpCaqZxEuGQNLZmerZJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb7c55dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bnb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvluwo63AdfXfCIjs5fGun11PZADBSTa%2FSrSW9lhiTPrJiF9prwmnlgBbXneTnLAQe%2ByRSdMqgW8%2BA3t1mTcHknxhUXckPQn%2B8scP01V0X5x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee2bdadabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37944,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3628d8c7a2f06a7d20a57d025bcc04d2","sha1":"58fa12b8e3fa5593531ccbfd19a9b2716eb7f582","sha256":"dfa4b67e7e96474b620f4dc38d4003ea15e9cee2eaddaa6a49e1cbc6e953fd14","sha512":"845d2feebda7d2867926e6e8cdbfb99e70dda6689a96de39cc7838a6abbda16fc93eaeec04fea840e433e6525be03c3afb8e027c709c080ed2fb219fa23661fb","ssdeep":"768:fnL8pSeTrpq/irMXGUJN4MFKwJKsdH3ujUcg:fLySeT0/ioXG+N4MF3KsdQUcg","tlshash":"5d03e6b0afd9c118d934ddd22be3bcea093b33cf47cf6c9155da600169e0729a255b92","first_seen":"2026-02-25T18:33:26.718246Z","last_seen":"2026-02-25T18:33:26.718246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/getCoinList","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T46ZNS287i6DlclbOjHl5iCRMYd3wKkdqJ5whlPMrIzqJtaC689UClPvzfxmJ2lC0TqtsI3PMdtn7tDR4xM%2F1jj1iA5%2FL0u1e%2F4a0AsLZWTR\"}]}\r\ncf-ray: 9d3949e3a8ea79a6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18670,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"89c2de4344bfa559dbc8fe78891fa086","sha1":"272beb194aed77b7005421c756332e56dec30750","sha256":"92c4ec83af0923c76169227ee90ca698899199c9a29baca1e0a7fae200df6fc2","sha512":"0186eea45d3a6b46bcf279fbccc01fb98a2c029fc38be03c45fb310b063ff499aa06d6f4d1232aa6f14d72a9c3b8651617da38706084f38773b9c47a520c9395","ssdeep":"384:UsN692ly5vSWdBXp6qfUbBGoSIsoqLLYqxp1Rfd4Vv9IReA8Ix:UK692ly5qWXZ6qMbBGo/sogLYqxp1Rfl","tlshash":"69821156612c44bec56dd1e229bf3d13914c322fecc9ca1e82de8d99cee4a746907b07","first_seen":"2026-02-25T18:33:26.720054Z","last_seen":"2026-02-25T18:33:26.720054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NyJG6RBPuy49S7MiWVBDurKr6zXvAvQn5oYFcsYKmYNcH0RdRHrnPjjrGLV1hr7RmypXam9L8f5tzvksHmp75JGzAEiyKVGXKwFSS2RG3Vs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb6c22dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"coti\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OI9IXur9CIOyBQLg5ImxgaEyp2hOkRip3VV76U%2FxiB3IV7dq3QMF1NFNGxyeO1qHnGXBeWj1TuNLTu9tw4QdBw29m1YZ7kAk3OKxp%2BjyAsRH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee4c5adabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40323,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f52d3bba7a08f8435db2eff527379b09","sha1":"8ce9c6c704fce9604a7f23d159a2d2a9636b7435","sha256":"8cbfd765b01a3dd590cd845103da0cf42750986818ed9781a4efc735e06953d4","sha512":"a62731a2a80f8025839d72cc200b4d99c390ac954398344218330036b0ae82eb5d5dc18a3b8a9bd0ccd2e9e6c392274f70bb4835b713afb91497e71c64ab9ea2","ssdeep":"384:7XrNgq0GbERz2Jrv9xzxJ/Ud97JxNkk6eLhsChdx5:7XrNgq5bERz2Jr9xzxJ/Ud9Njkk6eLhj","tlshash":"1d0371744f88c25ad53e8c892fb3bee0121379d74edd5dd506fb0c0a7e40620a29a7b6","first_seen":"2026-02-25T18:33:26.722093Z","last_seen":"2026-02-25T18:33:26.722093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaB74Sfy1C7hrAHAtYEqV7wUJ8Dox1xi1LCDxeGK3zWtDn5%2ByK3HClfHEWuiEHvayRt3DEm%2FB6SOVA6tFd0EQEC%2FJNo64JsN7ZpZgu06qUnP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb5bf4dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:32:59.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9d3949dbdb5432fa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 611597\r\nexpires: Mon, 15 Feb 2027 18:32:59 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C9O6Cg%2B%2BUPUAX4E3MgRar3%2FX5Nj9dPJTCo2hslJdBWhStXUO6eMpC7Xce%2FmI%2ByRj82zx3v%2FzmL0H%2BRzcvoDGer9jqAQHPKxf1n1Hp6DWjco23O4j9drMz%2BLevtIuJ9VrFO%2FlSf03\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-08T10:12:21.984173Z","times_seen":29292,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":15,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jV7X7UjejPKCbjbdBhuz8yPivNG5TYmpXcqsRNkwoB5ncisATZ1J0QQRK%2Bz0TLDPku3J6%2F%2FAI5Jr6xT6S15QHZqmiS1X2QpH66wln2Rrhzy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e53c96dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.twfxcc.vip/profile/upload/2025/09/24/LTC_20250924145733A033.png?2.2.1764825825288","fqdn":"admin-api.twfxcc.vip","domain":"twfxcc.vip","tld":"vip"},"ip":{"addr":"104.21.28.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twfxcc.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:37:43 GMT","end":"Sun, 19 Apr 2026 22:35:07 GMT"},"fingerprint":{"sha1":"F4:9A:DF:F4:DC:4D:4E:28:B4:DF:24:0F:A6:19:39:51:EF:F3:37:CC","sha256":"8E:15:00:F5:DE:AA:49:99:E7:49:03:34:57:F2:57:DA:AD:A0:6F:31:49:F8:E2:F7:D5:A1:50:29:8B:C9:63:1B"}}},"request":{"raw":"GET /profile/upload/2025/09/24/LTC_20250924145733A033.png?2.2.1764825825288 HTTP/1.1\r\nHost: admin-api.twfxcc.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 957\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Wed, 24 Sep 2025 06:57:33 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=653da17418f3734cba3dbac8d075b04c; Max-Age=86400; httponly; path=/\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzrJIQigXa%2Ftk2cfv%2Fjg0GMtzW0o6vEgYF%2F37lmfnktiC%2FjorlxTYnV3LYz15H6x9vynovGjOcbIzkafy3mAp2ASbS1zLJju3xIFOJ9Tjb2yk96J\"}]}\r\ncf-ray: 9d3949e6bd40f327-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-06T23:47:44.179662Z","times_seen":510,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":45,"dns":1,"connect":12,"send":0,"wait":240,"receive":3,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1xbY8XaxqwOshzIl0LpZScPRJUY%2B96teUVnJpf3hlIAomw9MOOKI8N6a%2FupRdGs%2FKVMekSloSrspFlGjc5sI5CDXMY6uhvEdAem8R2Hfdsn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb4bc3dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4bUKHM5CCssfgBJgMYukN5nwA2hpemptIjVtKYnbAq01IEptnwWUTPjj9abZyWjj0lpmk0XOFsGQ5pXk97IAHYUAj2FNgAowJejXP2FPGp2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb6c18dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"link\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zx8iQdTyAuraXKrVXguZkpJ5uiczA9suC9OLEiREcThj5P%2FD%2B3ljs5wSgWBxbfDaJD6deOWnIZTQ0NZdvsPiCTq2s5CRPyMdgooiAyYBhffE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee6cbbdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34110,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b0bc49b037f75eb16be729bbcc073613","sha1":"e14cdf4dfef2db0e618c201fc949065f61008b63","sha256":"73ca7b5a58043183ca88bb9150524340b2d73985f6ec8d88301e1aa9bf0d3bfc","sha512":"c5853c2d991c073edbd8a2a17622be8107e48e47f7676464ac2923ebaeaf36b3c49199d4f962efe18a1b0edf0d8c29299feea5967ea3ab73e1db8b5260a8dc28","ssdeep":"768:RiKzIybOKIXGX2/hJkpH28WILlt1TcuwLffJ6VNUr+GrAKv8ZDe9WQrg4H7tlIVZ:fTe+nVuH6","tlshash":"e7e24e314b88c249c835deda1fbbfee41726bbd34bdc0d8102ed4944fe52e69a055b92","first_seen":"2026-02-25T18:33:26.72605Z","last_seen":"2026-02-25T18:33:26.72605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/47b23749312240eda5e699d778e2c0ba.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/47b23749312240eda5e699d778e2c0ba.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyN4p2zD-ofhdLDM4m3HkzikOND2Nkq4kdqCpLNwhE0LEKsQpMo4zAwyr_yaT63qknOvxkhI7I\r\nx-goog-generation: 1745020297149372\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1188\r\nx-goog-hash: crc32c=CwkW/Q==, md5=lmqvQfTbhPbwMT92Tllfhw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1188\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:51:37 GMT\r\netag: \"966aaf41f4db84f6f0313f764e595f87\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"966aaf41f4db84f6f0313f764e595f87","sha1":"ec31ebd55b615166aec1e4bff4a95366252f957d","sha256":"dbc3430ec06cacc10616c517f710085fd959912984173da9798bd95223efe816","sha512":"3bfbad89056f33eac8910a9d416780d6818aece383fce4b23f2a658b657a42e57a991a92c7ab958da140e3b293ff62b25771ccc0ce092c9d458d23e0ad646d9b","ssdeep":"","tlshash":"0921da29d5ed9095521586cecf0d4354d012ca70e4c42437bdd3b3f27651aa2405ad81","first_seen":"2024-12-03T23:58:43.681666Z","last_seen":"2026-06-04T15:28:13.451487Z","times_seen":104,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.gxcctw.vip/ws/16980e0d-d432-46a8-afdb-946f7540e28a","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /ws/16980e0d-d432-46a8-afdb-946f7540e28a HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gxcctw.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: I51HrsxNRRcU93D/06Mk3g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Wed, 25 Feb 2026 18:33:00 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gxcctw.vip\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: BuITPXLMdJXyskmFhEdLwi2YtRI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=fb154207d751086ba892d5487bfc2045; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lCRuKLGxZLC5vrE%2Fldd1r1%2FAn16WDoEjP46OseSSUcg06GpmojZsd9X%2FjX4Y2XBzZQaq5T02UhnsoiD5JcyLk2SoaM5AFOB8pQpn5b48twsZ4J15wHqmQmtsmagkh7e7b%2FHCTw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d3949e02b903f45-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7593\u0026min_rtt=7585\u0026rtt_var=1614\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3105\u0026recv_bytes=1192\u0026delivery_rate=570378\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=fc68a83b463d030e\u0026ts=492\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":0,"dns":40,"connect":47,"send":0,"wait":474,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/dark/next.png?2.2.1764825825288","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/dark/next.png?2.2.1764825825288 HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 822\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\netag: \"69311a90-336\"\r\nexpires: Fri, 27 Mar 2026 18:00:22 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1958\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mgYQ7z%2FgWSREKB129yMboUE6V0h2Yat9jSlCO5A8zipQkw3%2BH831ODYDaSRFelhiGPELFNBy4xGsFiTJJhlqp1kM2JSfqGxVWzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e60ec5dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f4c6bd26236cec628eca09228bd623","sha1":"0c0cd20cdad0053d2d88d9b2a9bdb45aa7548bb3","sha256":"bc7f7a772a5fef50a9499daf268bb6f82b915b33c10c2a2cf8afe24ec77da77a","sha512":"fdde6c6101a816389398341a64f8dd37cb4bf13a6392fa0379b5b7889da00c16ae38792f51e8025be530c28ae5ea90842e6c3d7ed43b80db094000dbfd788a88","ssdeep":"","tlshash":"5e0186a5364ef13ef1c3c935e5340364cb3b4c38857c28aaf6d09d2694c0b49719135a","first_seen":"2025-10-12T16:34:39.767715Z","last_seen":"2026-06-01T14:38:39.432219Z","times_seen":97,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-ray: 9d3949e7b921b1b8-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"65692999-26350\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1169207\r\nexpires: Mon, 15 Feb 2027 18:33:01 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rwpWIh0SNC4iDe1VNFSvct4LX5ATEn9gWzfjFTWFu9lXeBwo5%2Ff72aJClezGsWjTrIUyS84filWf0iT5Hsl4ayM49B4mGdkyPt%2BcOqGXHqSUfOXdHXu5aEWCCuKrUimJeG4JHmWj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-08T11:42:58.724888Z","times_seen":42382,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":17,"dns":1,"connect":0,"send":0,"wait":62,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/notice/getAllNoticeList","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uu4JjH2E%2FchBDoFhaBFP1LQhq0c8kSxe%2Ff%2B%2BiPJ9HQJ%2BN3XvKtZNIqS8oz2At3rwLg7K0Eq0vclfgUpntShZxGVMaTVwGmv8qFsD%2FF839Tml\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ea3930dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lrc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKRLI7Du9rqe0KxG%2BYnQbcLoNV2fKXot2KQQ2B9uLNB6E5wX5r7A1oe7pfUfdxTD3bywzWQsdMstPSBMdxMRNN9J0M0UB4mSVj37xl%2Bi0YXp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee4c5edabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37505,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3a616cbf0901d3bd91e2c929d50d665e","sha1":"b8e317ba3ac6453460ccf8eb47c4563b5dfe01f2","sha256":"42d3d1ea22aac2013a5575fbc0ed77f5f6d540abafa0a614935afb71537f1168","sha512":"b2f6512cb0f13322c50458c50917c1b783e86eff3472298c21979e5ba505bb60b4048ce2a09e64815a61c0a364244734e04e1167edfa094b68a12f18d6489a43","ssdeep":"384:CdEXWyhKGEfgf9WIyZeYpztfb0yVrBlhRBKUnE/CDm:Cm03ZbhXKUnE/6m","tlshash":"88f29438bf58c148c93ede862fd3fed125ea35d74acc98c214db4c48aa5025d9ce57a2","first_seen":"2026-02-25T18:33:26.169008Z","last_seen":"2026-02-25T18:33:26.7318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxq0BnTkFXEhjXga8wSM_Rfq13z5UD9RY3QrhyyjwrhirBrD-aVypnk0ZlS-x9JmB0_fsLseQU\r\nx-goog-generation: 1745019079859499\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3817\r\nx-goog-hash: crc32c=nHBXww==, md5=+nrXU3XMeAaFfbxtWQ2yHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3817\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:31:19 GMT\r\netag: \"fa7ad75375cc7806857dbc6d590db21c\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"fa7ad75375cc7806857dbc6d590db21c","sha1":"973a54bcc76c2c86ad0a41a7eaccd8d2a2686a75","sha256":"8ed69043b1cea67b8ad4234d9fb6f18f44d424aeea7181930df009866ea5a452","sha512":"3934b78cb9f04296a8792c7ebd652454730ff8c5a97a4d7c1d6053f634a7d029d0577c20cdadb822430b57d5e59299f8e4564d9a2f4d84c8c08f10fcb3b43a87","ssdeep":"","tlshash":"1a718d22ecbbc800fc15db1a6d5b6562313b36e314d4e9f716cc0dbe2e1670486b0123","first_seen":"2025-08-29T09:33:23.930899Z","last_seen":"2026-04-07T11:52:26.857898Z","times_seen":87,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/svg/dark/notice.svg?2.2.1764825825288","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/svg/dark/notice.svg?2.2.1764825825288 HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a92-76a\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yj43z3Rdn%2BguXVN3ie29sBCImhRZHIshZtpcLwd8if213bULcciY3Dw8TC0AUWZQR6fz0PuWInC0gEaTwAzAzPE3ftDMo4Uftqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e5ee54dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1898,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f262267496bf86de09b562db82a676d9","sha1":"a9163b950a68f56705da45159ba44533507505c5","sha256":"8c02636fda22906716b1b028e7dfde4a436cb95da0029bdeac8e201030f344a0","sha512":"c9bda0880dbea6da7260578858be5402c6a62d85cb8f8639f2313e02f7fda87ae24d05de9b87efb86dd1341dab2165b9d90524dd44d2d1938b25b63a2e1a6c6e","ssdeep":"","tlshash":"364175c659f952e4f2cdc320d6a731051e6a747730e1026cfeeea5656b308f90f8e049","first_seen":"2025-07-27T10:32:31.414438Z","last_seen":"2026-06-04T15:28:13.440921Z","times_seen":107,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBqSJJ6UVl39Q4drLerNbeWk7x%2BFPDJLTUSBZm6f%2FbdY9seUxYjWv4ekGXmh9Fh43FzBKrIKwFgMBHGO4Qxqt6dwTjiZkmSWA3K4w19Z%2F%2FcL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb6c2ddabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"gtc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQNGYtqnersAzVU34Y5gMFasl%2BFgkVPMP4iLf2yCGISJso3kH0pzoxTv7YPqJxlhy%2F3XbFjBZ9ABOesPA0gN9YdwOLvhECxQHUTTulxlGyhD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee0b8edabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34930,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4c9a7d1cbaae6f70e1c05d95ec4a9134","sha1":"d1383e1f8633f85ea909b715c7500cab927a5ff9","sha256":"c8c228cd66d956bd7710d1c1fb320d3d2d96d8537029bc3b7f1d76729a397d28","sha512":"99b8a842c6a37196a6e235551a2a0320065eb461978307a41b11f0102269887ae29d3cba4697bb9427c207c906ac09d6d18922ae308af989ef6fe7a8cc79a9cf","ssdeep":"96:Zrj2Xo/X1Hg2oboKpUwbvjodNMR9TU/Omdrtg/R/8dSATk5xR3dTuvlgtpG:xXtoDbv0fKU/Omg/L36r","tlshash":"48f226341a98d259d4315cee1fb37fe096193ac74adfdcc203ad1d0cee54266a2a47b2","first_seen":"2026-02-25T18:33:15.255422Z","last_seen":"2026-02-25T18:33:26.734407Z","times_seen":3,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/getAllSetting","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytxZzYfSI9%2FUO7p5SgkkjoJjBtJFUU61hMzx2zmXjwmzvEXQdYKMtUP6vxwfaaIouXtTatUSCOFp4xUiAglQU5X2XOByu2DF%2FyMPsESFmEGI\"}]}\r\ncf-ray: 9d3949e3a90379a6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15386,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14900), with no line terminators","md5":"0104fcf46caa0723a26be00207205dd7","sha1":"8d8b65ef6851c262e5b0dcdf1a7dccabd4d5d89d","sha256":"2cbb736c7f9c81d187e6b7fde3c2d7215c9ce4bc9f69437e1720f22ab245f0e8","sha512":"7232a883839d049fbf3ea01ab1144318618333508bfb2f811e3cf46bff947f304e92098665087f6dc0a76821f20fac80bb867b3631d2132f7ad9e643f6cbfd06","ssdeep":"384:hgXuGRlR8F0wHZ1wkoPQVR2eJPMJzuxWwTSCS+O69deBhgc9yT/4GxZK+8dKK3Gs:hgXxRlR8F0wHZ1wdPQVR7JK+W6SCS+OT","tlshash":"8562428931ccc87dca5adaf650f73ea52a3c1416d84eac51c5fabf6cd9a86305c5320b","first_seen":"2026-02-24T16:10:35.230053Z","last_seen":"2026-03-02T14:14:09.397074Z","times_seen":25,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/ai.webp","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/ai.webp HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9016\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\netag: \"69311a90-2338\"\r\naccept-ranges: bytes\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKbORMVriomfi9S0jPM3xsTjNfaMbYlo3iBvMK84zS2UuUZjMiP7RO24MyP3rh4VJ4i1cYxuED0kTOsN8dkvWWmN4NagOGXg3%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e6d920dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ee434d763c325a57dc68dd5cd9342f9","sha1":"db594747347f4901f82ff0d9cb3ce71e95613f78","sha256":"40bd9102ca0e9c26e17694aa71ca21d20bf1f920a73ad03299e21f39eb59383c","sha512":"8a07454d75b9d85f457896ac8bbe209bb45fab6a45b8af5ca1731f443be0938a23f231c9491f76270d08a92e10e8ff453b5de08bbd3196d5c3c8645e5bee169b","ssdeep":"192:FwTdlXOaHnulmseQ++iVAr/wOr9fwO7+v3DeULFnXX0EXlTqKoh5b3:FwTXeaH4++i+X2n3qUJ0+lNoh5","tlshash":"20129e112be96767c912763dd1d05b9bde76fe0ccda8abaa4100895f09172d03d8c1df","first_seen":"2024-10-31T21:21:10.228315Z","last_seen":"2026-06-01T14:38:39.475463Z","times_seen":182,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audjpy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWvwbT2CI7YxzNb0O4THTz5H0AKvpafNf3Lu%2B2ekFAAvf8lkbhync84Mqmy0RQVjIVd5H%2BIoy1zd7Cz4ZX9Hm3safoKT5MuvPVtCEydPBtmY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee4c74dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44312,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c38aea39b05f888a40f6b6c566c681b6","sha1":"4ac473995b56d1affe961ba877b174a58195f73a","sha256":"499309d9bf69b59d2259390630817e9d2c2f1d938d817ed0e772c73dfe3b4955","sha512":"cac1a7732e004f2b94832f9b3ba1cfdbea01245b99a7c4295fdbc32d9f5da6289684143964d36c5e71013ae3acc4ad6e7dd1ba82467233c763e6268f4173d8f8","ssdeep":"384:9GR2saji7V1+uXhVztU192mpNTKXRLRfov72QQhptZTsCJ:9GRpajoVthV5U192mX+gibhptBJ","tlshash":"7b139f74cf8dd179c4f58cd2bfb37feb8a1331e25add6d4122ab08446990628e358792","first_seen":"2026-02-25T18:33:26.21439Z","last_seen":"2026-02-25T18:33:26.737246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2d45232a0b2345f1a9190f6222764c83.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2d45232a0b2345f1a9190f6222764c83.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz22qxn5PbZzSSRBUhaEcEQ4LKVdRoqSlrx3vdVJIOEKdwaI3zwHOuJdGA_fayYz_F-jt7qzlE\r\nx-goog-generation: 1745018940732464\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 25649\r\nx-goog-hash: crc32c=DU6x7w==, md5=ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 25649\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:29:00 GMT\r\netag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.294395Z","times_seen":678,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":98,"dns":13,"connect":30,"send":0,"wait":60,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzvRmsOY1AoKpKoXa3psFBxJc_jO0rlu6b7EM9ek950FR_h_euMOe_rTQvXgqTFh8TeTZ0tTPw\r\nx-goog-generation: 1745019064372382\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9740\r\nx-goog-hash: crc32c=d0/XYQ==, md5=V7VWqtqhYHeDi7LvHTUU0Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9740\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:31:04 GMT\r\netag: \"57b556aadaa16077838bb2ef1d3514d1\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"57b556aadaa16077838bb2ef1d3514d1","sha1":"f85a35bca10b9f1edcfa8c1697436d9569f4cd2f","sha256":"a657211e0a7d76e9c8e536f6c99e1bca3b335e42d03c857ef1615ab3f4675da5","sha512":"48bf1e4b91578de3c293203a774faab28de03c1e0cde2a734ffa867243723851614b0d52e89c6af368f470edf69dac8184c3f7b13840e38100f01ea1297fb8ff","ssdeep":"192:jvVBLKx0QCmJhGtRfIUiN99uvV6TJhDgYxBVtoBaye:xox0Zc99uN6FhD1BtJ","tlshash":"8b126a17ad41afc8fbcde36894ea1b3af363e62317ab8205402b591650cb93c480f579","first_seen":"2025-08-29T09:33:23.939266Z","last_seen":"2026-04-07T11:52:26.970303Z","times_seen":87,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzAICf2bKeJ2LRNzoctBg3l6zAioUkcjzDNXiZp9fWtiLpWEW4M6J9tJccSgU-lnpd-yJnd1rY\r\nx-goog-generation: 1745019071782236\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7196\r\nx-goog-hash: crc32c=tCfjHQ==, md5=kI8WMgoKMsgRfKlDwqojHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7196\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:31:11 GMT\r\netag: \"908f16320a0a32c8117ca943c2aa231c\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"908f16320a0a32c8117ca943c2aa231c","sha1":"b49e31cd823528649adf1b0fcab343e4e6055b33","sha256":"2a03254b988fdcf3c84ae977a221b83ce9d10f896b0ec508fcbe877c22ad9161","sha512":"531db683a9c449a6d0ace9b1e73a6bd3561c54d71f0421d4255b9698d7bd12c74779b7805cafcebd0fd50c437c64f29d6d761af58e57fa57874b7df5cbe1c06c","ssdeep":"96:cmO7bsMr5XAG3VBRynGlNqbRuYrkVkls7VOZ1d3AHI1K9v3Tv9Cre:0xrqGlanNbgYoWelkyZCre","tlshash":"8de19de8986016208ecac5f0598578a3d4f893cabebb7e4a44896e01c6555ad3f52f34","first_seen":"2025-02-06T02:55:20.514077Z","last_seen":"2026-04-07T11:52:26.924617Z","times_seen":91,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":22,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/getCoinList","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRt2UmIN2Z%2BCRMx4JnJohhoCM5lpFE2OzXFaGy7hjK8Cssgb9aRBiFM9QejlEE8SFmtmnFEVVaoj6DfEzpFeZ%2FvTZI8W14Niz56YZnLXdOju\"}]}\r\ncf-ray: 9d3949e0c91379a6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":29,"dns":0,"connect":8,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/chat.png","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/chat.png HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-279a\"\r\nexpires: Fri, 27 Mar 2026 18:00:22 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1958\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRS%2FlvUO%2FB6MnkWiT21ERxkUGb%2FffFxDMu0miMxYko1DNW3EUbMQqR4qTxWdwFVF8XjtS7FsFyWcwZNy8jyVi40NjYOIimxTDHo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e75a58dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 391 x 391, 8-bit/color RGBA, non-interlaced","md5":"c0b8583d102ab70eb5a9cd4e1ac47c2b","sha1":"ecc2a351a680d2c01b7070b167755e1d9c088de6","sha256":"33123e4b44608f7db2cfc5dc0e6d0fcf0cb06c5e8ac056a637e43dc79a55c407","sha512":"633def91d6eea6f4d338b49bc2d0540eadeb278b6510c824d8e2edd6a0d0bc6f205639cabb5db6bed89d6f7bf1fea63a51f8d877cc0592528b288a6e37210207","ssdeep":"192:LEJaISqTHLkndsrQKyeSZD1sOikJbazA0PkQJprNKIOqJPj9TDiXVLJxkK5DX:LIaI7HwndscKy3bziObazAWkQJPKU1DM","tlshash":"b522bfcd558e4520a9e9203191c6631adf38e9ac7a5bf6a1fc31c4c553a2ce2e74b618","first_seen":"2025-10-12T16:34:39.749254Z","last_seen":"2026-06-01T14:38:39.480971Z","times_seen":78,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/a428289bcfe346899355ed8bafdeb067.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/a428289bcfe346899355ed8bafdeb067.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwjX-RtzBVMUf83qaZ_oMMyDb5xxY-rMTX1h4Zm-n7GK34meF_FNTZxJS2zM5j-IBn4QB69RMk\r\nx-goog-generation: 1745018923182052\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12869\r\nx-goog-hash: crc32c=YamtSA==, md5=pTPuze5aeJ59lPj3n5XViA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 12869\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:25 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:25 GMT\r\ncache-control: public, max-age=3600\r\nage: 1958\r\nlast-modified: Fri, 18 Apr 2025 23:28:43 GMT\r\netag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.266893Z","times_seen":677,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":272,"dns":15,"connect":17,"send":0,"wait":15,"receive":1,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.twfxcc.vip/profile/upload/2025/09/24/LINK_20250924145937A037.png?2.2.1764825825288","fqdn":"admin-api.twfxcc.vip","domain":"twfxcc.vip","tld":"vip"},"ip":{"addr":"104.21.28.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twfxcc.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:37:43 GMT","end":"Sun, 19 Apr 2026 22:35:07 GMT"},"fingerprint":{"sha1":"F4:9A:DF:F4:DC:4D:4E:28:B4:DF:24:0F:A6:19:39:51:EF:F3:37:CC","sha256":"8E:15:00:F5:DE:AA:49:99:E7:49:03:34:57:F2:57:DA:AD:A0:6F:31:49:F8:E2:F7:D5:A1:50:29:8B:C9:63:1B"}}},"request":{"raw":"GET /profile/upload/2025/09/24/LINK_20250924145937A037.png?2.2.1764825825288 HTTP/1.1\r\nHost: admin-api.twfxcc.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 1008\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Wed, 24 Sep 2025 06:59:37 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=5c79d1c6d2324d52254ab6aae0209731; Max-Age=86400; httponly; path=/\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fl%2FyRpn%2Frc26jQJ11hSmWZzoEbU8uWj1adPsh%2Fh07BYwTOI4ubcLYQwzeGc72qOqygw39AovpHEDvNKPGNx9y5RoSZiltIKqXOIqbtt7KzheB1iZ\"}]}\r\ncf-ray: 9d3949e6acfdf327-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-07T20:45:48.005901Z","times_seen":354,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZq3nzRL%2FqHvcYeqcosqx9SJIjTmkE%2BXz4ZmuP8%2FYq8wK1EcIa0xjxneENBn1MHy98%2FYiev3yWoXKDN1YdJljbD7aQFnnDAKQBb4ClA3RBme\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb5c00dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T18:32:58.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:23:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=b77f58e56fba5f45979cfa5789960018; Max-Age=86400; httponly; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdX2AEHv0yedqhQhpM8OpJXbyUeG79o%2Fvs3JWSXGNWR13a3ru%2Bcmj7oF6Qtfe%2FZDYou7ymOyfpGRzDua7KpKjeF8Wu7GumbnoGM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d3949d7ade25fbf-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1167)","md5":"0450131b547251651647d2270355a98f","sha1":"44155ad26acf489f52c9c8601f44699cead4a314","sha256":"f3d88ebf30af503bb25e86acd6b9cb2ba5a74833172690d5101afcd045460511","sha512":"322677195a01e6019d1f918a00f2e5e1d29ae7d0ceed33d10b9db72ec11020fa342c84b2b8824c604455c11691a0fa3233587a15caa68c822aaec13a1130d077","ssdeep":"192:TFvXUjcHUqRGMRrdiWK1FiUm9Al6ZIdv6XZCxfN2nftZbKuB1XiEiHfo:VUctU0pmdUZCx127SzHA","tlshash":"0d0273671df1981a23664226abebf0145a309143c60e8ce8b9dc54ed8fc1fd9c4e7bb5","first_seen":"2026-02-24T16:10:35.28591Z","last_seen":"2026-02-25T18:44:39.577051Z","times_seen":23,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":45,"dns":14,"connect":8,"send":0,"wait":449,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/assets/index-DoYk-zR4.js","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:32:59.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /assets/index-DoYk-zR4.js HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:23:44 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311ae0-8c4a7\"\r\nexpires: Thu, 26 Feb 2026 06:00:12 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1966\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbC7n93CIoks0JLRct3wk2NcMUuE2Ga64Ho%2FQT6KIkJ9BBWTIaeJoqlQhu6hkkvFLDt3z2Z%2BEfVjU2b2fCH%2F7E3DUFep%2F1hccuQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949dbce32dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574631,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64745)","md5":"c6e48c85c48542870141fb21ff08eb5a","sha1":"e95fc0ecfb58879799ae3043cfa96c0bea6efdac","sha256":"4186d0b08b908e62020f800538afe666af91bee009a619f6c040ed4553064486","sha512":"ceda461b9daaa98cd44c50b2df5d73a2e4f2f08b5256cae110ca392c3474a350c7374089f12e30be9d92a4ff78e0d5897cb09d94d6b72e3f25bb5bf457d6fead","ssdeep":"6144:yjzHtbuTql6VjqXINQqhcVLNW1wYhNarQJr1FIv8483:YzHtbui6VlQqhKY2QJBFIhy","tlshash":"c0c4e842f8969a7de7b7e495504d2410724c3fcac00888e6b5fe9e162b97db8371eb34","first_seen":"2026-02-24T16:10:35.273423Z","last_seen":"2026-02-25T18:44:39.534694Z","times_seen":23,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/contract.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/contract.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-594\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SemnjJWXzzxmdwOMX0jarOCZn7Igl1llHwz5VUNElldFuxPREe%2BoUkSjICgdQTWhmEprsVnyZmwxD6toTbIZ3PEzcitAcUHOSUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e5ee6edabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efaacf17d8d90547953a7a9dd61ec2b4","sha1":"e3717b22a97be0eb581782ec087beb5b56ad036c","sha256":"8dc73b270dc5ae9a60c94191834deb88dbe59950f72be72bdda75ea3618facd0","sha512":"5cc2004dd6c6d614dc980531e6591e8f408dfcb0eb6e632da58375088015f761f630743b581225655dccd32464b2311b5513d2a70d43c4b5bd3ee18033d929fc","ssdeep":"","tlshash":"dc2141ebe7d8b5d0e905e780c91592a1b5b931f93b7e4b54ca90af08331c06cc88ec54","first_seen":"2025-09-28T11:01:39.541404Z","last_seen":"2026-06-01T14:38:39.451045Z","times_seen":78,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/svg/dark/dui.svg?2.2.1764825825288","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/svg/dark/dui.svg?2.2.1764825825288 HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a92-940\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpBzFEVHGfE8eLqzitas1ilsNKRWkBYtyjvbldTWc0HnKobIpOsQOtI6t7mVEjSsVBeuL5zOS5bkN%2FQHeQUWwUIBm0sZJWE5k%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e60eb1dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fedf984d20136bd338292c02f3678abc","sha1":"28408456ad6526e0e430a6eac75418fdb287cc04","sha256":"23cf0fb591ed527fa662ad48922a235379400ebacc2668334b5f41a148fd997e","sha512":"4d30fdecfec2b773ccfa10cfaaa9fc1a28f547603570757dfa77b0cceeacbd335382a73cd5f7f9a06ff3e3a52d5e895b1f339d6f2108b3719e1526aab6d8f15d","ssdeep":"","tlshash":"834130ea13bc45b8e406839453ba796ae26531eb2480d438f6cc1b24cf230b709c64af","first_seen":"2026-02-24T16:10:35.275496Z","last_seen":"2026-06-01T14:38:39.507418Z","times_seen":62,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9d8QqC0fllTWaIGFLHz7hfkK5JeRGkdQhONeW4yIoArwKtfvEf92ag8NMe59JaO4HKNmAkHDPmcvwbGoLKXr7XoqTHQfiT0ayOvpu9b64kRy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ec0e2edabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"95721dd5a24171ec52616de5d5ad0d83","sha1":"5389bfd65fb67640cacac4350d747757f4762d62","sha256":"b08199ddde975cb2ad77820d87258be7f5aa6fe0598fe8c5dfc86faa6ceef3e8","sha512":"8bb3c300238a49bc493d6caab6b3872b719431e07b862333e0d24fee0eae48dcaeb7afa891e45b88ae00d2967caeb88e33ef8f674ab9d3f1bc81e5036a5f17e0","ssdeep":"","tlshash":"4ff0464e657c8e794c194ae721ca7dc8666e02479660cc70ab6bcf3c81f497b2b17208","first_seen":"2025-11-01T17:44:45.803082Z","last_seen":"2026-03-20T19:46:41.758995Z","times_seen":28,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"trx\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFGozd16bGi5kIsczwxNIFK%2BcJvSJwjrXc%2BEHqROYU9hXnK1TLx9HvVASN8QDk18w9PBH0Qg6io0CF71Zb2o7sgRVBD1aaLgy6GxPES1vxB6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee2bf9dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38425,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"69f19fae1febeec76603a8f213a8094d","sha1":"85571f2ca363784527eba80cf89b3fa27b856db0","sha256":"d53c570b765cdcd735bb94dd5cd3bae4487a2beb02e33267b2630d45e761c07c","sha512":"48f94c5bd63a587e326e3026b4881d8fce852fb1d40fef454880e0e8b246ae3cbd7d08a7f7c7817d61e468d54b9c050415b2df76609197ea65bb474e357bbed8","ssdeep":"384:leu5psY0yo8wcd724dHa8aTUaSTYbWD89JKKlqYa0zdH:lOIK4dMUpTLD8HVH","tlshash":"4d034e308ab5d249c935fc991fb7aea0661d39c70ecdd8c3459d1c1ceed4224b1b6ba2","first_seen":"2026-02-25T18:33:26.746784Z","last_seen":"2026-02-25T18:33:26.746784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzoKlhT5iVAg-DE6GLtL0W-GcDQ9P7RmeSXWus1uWcOYG8l7krqwqTPAKfrWaOq4xARupeoswI\r\nx-goog-generation: 1745020353527348\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1265\r\nx-goog-hash: crc32c=gdb0vQ==, md5=6FywUDRdYn4/40KqFOuhxQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1265\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:52:33 GMT\r\netag: \"e85cb050345d627e3fe342aa14eba1c5\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"e85cb050345d627e3fe342aa14eba1c5","sha1":"966c36a1be038fd0bb9673e455ff3b6188f47453","sha256":"e9a792d1a596130e30d7b945e466f2691a563090f1ef06fe06fec57d7193e0e8","sha512":"3c97550a30076a06c1c785192fae5a5fcdc73aef866a69df4c5c4c891f35add2e58f895c7d671faec539ec3836898283385311e7479c7f4ef9ba7a6dd65893a7","ssdeep":"","tlshash":"0521b717faffd94437722d83839a85aeb07726082e004809345e49c5ec2a8885ceef44","first_seen":"2024-12-03T23:58:43.646323Z","last_seen":"2026-06-04T15:28:13.463069Z","times_seen":116,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/finance2.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/finance2.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-f73\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ntrljnqdu%2BshHCGZUc2MVS04cgrdueVnSUTh2bJx8bpWuoUVeOgVwOUFEe72Vrh5qhbH02B4OhLhw%2B5FN%2FuUd4AWy5jR13Vj8Ds%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e5fe91dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15820c69df508a6f4594abb055110518","sha1":"53c2b28dcfca28a52709d483c588599263a526e1","sha256":"e8ff1bfa91a28bea1b4e9ed5045a365ed42df3536c30d346ca29b736eb3fcce2","sha512":"fcf282fc54d829e562658e8643a296e414e53ae0c70b436255ea1e275accbd40416b1eb73a166221a68d63e5322b69764c0c39f23fe7b1167cf87bd1cea54ce0","ssdeep":"","tlshash":"3181b7f6e3d972f4918beba8c411947175ab34ff7b294b4983c0ded4651606d85ccc84","first_seen":"2025-10-12T16:34:39.812214Z","last_seen":"2026-06-01T14:38:39.501063Z","times_seen":77,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/assets/vendor-CGcHcJjv.css","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:32:59.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /assets/vendor-CGcHcJjv.css HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:23:44 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311ae0-1e27e\"\r\nexpires: Thu, 26 Feb 2026 06:00:12 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1966\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVd7uezrtXdrsZ4C0JvWLWQ9TWJ7wh%2B828%2BT4BORLgLl%2BSDm94ubKePOYH8zG%2BV9Cwn5v17eUhYOKHIS3R9erAsyPOWZY%2B9eNjo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949dbce47dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123518,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"feacc9695c0732ee31fcb6e268741bd2","sha1":"97e89b2991314e67eb4ba4962f44019954cb7511","sha256":"0081b07e43a5742a0e4051cbca6450d88bf212c4e3423c8765f307b3953af9ba","sha512":"e3da2102d176b9c3c58c4de159f92fcac15deb55b265ba8ad2edd08ac31246f66e80b5ee9047e4f0087bd5e437c148646d27044841faa5d4239f773af452ca25","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8Dbf8IG1Ah5aIzW:BnNIClDsIxuVS8f9tQ","tlshash":"1ac3e5a5e6c491fc6f2bf2649b8766d8f23cf661dd01daa4f105515c0ec7bf10223a2a","first_seen":"2025-11-01T17:44:45.747081Z","last_seen":"2026-03-20T19:46:41.787073Z","times_seen":53,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/assets/vendor-CpS3FrFl.js","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /assets/vendor-CpS3FrFl.js HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:23:44 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311ae0-2229af\"\r\nexpires: Thu, 26 Feb 2026 06:00:14 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1965\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cm3ZEvjHMfYxH1i9qJgjCAxvjeTa%2FzyQc9u0gkLqLoNpUgVMNYrFDeHIQQdU%2BKu2%2BAFidS7BPhxfEi0iOYoX%2BeFm38CJo59zt7w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949df4f58dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2238895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0645d6d2b48d3980f9cf17cac85d13b6","sha1":"60e02ae0bb01f7fa624edaa696734ac43975a465","sha256":"f8558e5500eb1736d6167b88cfd33180e484b08e9089b36a9452b1d8ce9231ca","sha512":"581deded0fd745691703a370a49cccad4e41d1d1c1bca4c6ee7370d65eecbae9c7a5011eeb23182a8ba522d6086433dae1ccc0b89527735a89c05431b0bbf195","ssdeep":"24576:FN2LD4rA7kDbDVETSxXQZWAacs4yKd4vVa+URU41:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URP","tlshash":"732509d8b651b03143a725a5007f050bf33a590db44f85a8f669e8da7cbd84e627bf38","first_seen":"2025-11-01T17:44:45.831131Z","last_seen":"2026-03-20T19:46:41.751492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5G8%2FHK7zR3IFPoCGC8VYjufJRNcRHCRjXiFUuRhE6DdyYDWfO%2FFjlvLSFX57pcGgF5i2I4ZkNNvrLdMUeVaOC1Noidh0ztA4gXt%2Fd08Kt9%2BA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e6c8c8dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f33984f9b45282fbf070199ecf9cdb4f","sha1":"5426d68c3aee771822443c5b6d84cf6b8ff9d60d","sha256":"0ad44671f7a5cb9cd48529a556d9d3d46d07663fd9649354e32d2a03f9b28fb1","sha512":"8d16a48cbde310f968a53cbc11508f0f45d8d025656ee94167557c4fcdcaadc8963da0967c1865191eb285e25cd9e9ea08e28d026739ea4462676213c540a85f","ssdeep":"","tlshash":"7ba02200ec2c8082280300c2030f0200c8f0b08c22008a08fe8ee230e2002ba308b888","first_seen":"2026-02-25T18:33:26.752538Z","last_seen":"2026-02-25T18:33:26.752538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBZBp9P8TR9odvhbEwSa9bqIYDEKc6HS%2F9iWBuFyGM8pr%2B68YSQS3i2MEu3wQL41rKtbu0P0gD%2BWYeQhqaPU3z9kb5NKkFfowjQdLLMMuP91\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb5bf8dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bh%2BD9inFIzM6oaMawSpqZYDrOBCmdzeYm025WKR4h1UhZzFyVS87k%2FJGQxXYoEcpbjRU2fm2bmeA0LV3eKeu3TCj2%2BWBEddxYpwSJJpGori%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb6c16dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cq9NQ%2Fyux%2BP%2FbJnjyOjT1cow%2FQwKwbC7YGvZkhuDts%2BPHt1TefTUOVAhERWN1jEyg%2Fjru6K8lgLpsH53gui2EseorRDYaE%2ByjuYv3ecfcWHv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb6c35dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=An3c3kMMVsyrnPu3WXt5DBQgrsz8XrZBR8kFkXIZCcOVGdIUXl1yyzXq6zyopBSTMuoruKsCZN2iUioWfBDIPyjzogOdOK1NDEsATEnstopz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb7c4fdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 72\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":72,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lever\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMCQy0Iv9MzfVN3Qlrp5V2%2FXZ6n%2FuRVCP5AZdM3BCM58KcSnLSgMfpKKkRBDF%2BkN3jyAg71inFdG4uL%2BX81Kz1TYbP7SrPoeTNaKsDACb9Nb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee3c52dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41475,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d7826cd69f978a2fedaf3b798123d99b","sha1":"9c82d610982f2d71ba60ff35bd26b8a42cf48fae","sha256":"ddfb6a822b4028b6d061b6b723b44cb5bf4a4d80640849061b9b52eaea395988","sha512":"344c6e49c29e0a3a03e3ca35b99b60d5ab889ac5916092942716c5f3c137b83113b6b6be29e5f0b798de370535994c9a03977da9073a10dfd4b01f22bf37788b","ssdeep":"768:NcW+9HS9mS6u1XMhX5PoOSGfA/Sa1q8pFXv65J/g54OXergy6K5jyszmq5eCSW5P:eW+9HS9mS6u18hX5PoOSGfA/Sa1q8pF2","tlshash":"6f1320f658bab086dd3c6c811fe37eb65d773a89cadd886c328900596953334c8c27b5","first_seen":"2025-10-12T16:34:39.857092Z","last_seen":"2026-06-01T14:38:39.440301Z","times_seen":77,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdbBmE5F3hOlOTGkdeOJ5mSJ4chLFPFYYTLsn7hGESQgz4wSR94ejyBN7kJgGdWBPBcvFSprpuNOI7jUGLL4PyDxpG4g9Xb%2BCtUbmp69yJ6r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb4bc6dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afaa%2Fqa3njV%2Bzkqw6ci3SBuTUb2KT5OE%2Fm0B%2Fum4KHAxXpwOvnvGlNOIAjzjjxvjji%2BBjHvROqrOaeIehfeqrH%2FyZZJtvDrfXr6daUsTJMTL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb7c5adabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"xrp\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcPUG4ytxZ0egDRf9bhc0s%2FmtDFI0%2F1%2BYdo%2FvmgK6Co98ZwhsAqKQIVwXJIbrzxSMH5fmf2nLPN0WV6njqVUHOErLmXjCnOHDRpO2QLhDzMo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949edfb73dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38476,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d0010755168714221412587f73bde84c","sha1":"d13617115418cdb4601d8acb650750190f6d375d","sha256":"85016f73593f8bad4b3097a6442f6621626313484d92fc05189dc9901577147e","sha512":"f0763dbb864e2af73c3e25feb45b3f859ec2aaf49eaf5c503a7a8c760f8ffa5db579a3733d86f1cf6665878c81a5470a14fe0b56a07466225786deec34b8e1ff","ssdeep":"768:UMLrJmEuXz/5Zhiy/BvBLVNTUfAoo2DFuXH/yv:zrJivhiyZvBLVNTQAn2DYXfyv","tlshash":"1f0387324ac4d059c9338cc11fe3bee83e3635c2eace2d227d990d14b9d4a69f156796","first_seen":"2026-02-25T18:33:26.756664Z","last_seen":"2026-02-25T18:33:26.756664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUT2%2FDYh1rsH6t0yASHKzPXzAVkTlMYzezOm9NMG0HQfz2Ny9ye7Py2WnWwmhk0dGdJ9x2J8Ke6%2FswPZ%2FWt%2F3Q1YHKr%2Bw9%2F5ruf9x26LqRGw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee9d24dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45061,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c26896a19c8b383b0f6b0a3952e41089","sha1":"aec12f27b7571de11ddb288b979943b0bd87ea91","sha256":"da7eb267b4b3b0a2caaf3be09af15e3ae8d57309e290c33d15caae4f2a593e95","sha512":"bed7420573ce2a3d0af523839ddaaa1196457f60b5ff2514ff4712067caef3392ad353af8de88fccd955dbcf460c60d123d7c9c3fc759c805eeb19d2651ecb92","ssdeep":"768:AS/g3aCidojHJ3usQrkbpCGqKOgN6wmKnAlaN2e:TY4ojVPXwgN6vWAw/","tlshash":"d713b3b10eaad579c8399cca2febfce09f1733c346dfad9106ab50061a543309565b93","first_seen":"2026-02-25T18:33:26.257004Z","last_seen":"2026-02-25T18:33:26.762192Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/charting_library/charting_library.min.js","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:32:59.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-2a6a\"\r\nexpires: Thu, 26 Feb 2026 06:00:12 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1966\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXchT%2FqSmJFG6tI6H%2FkPXGOzJJmwNw58i78xK0qWX6J3ddrw%2BUmXiK3ZC5iFT6n9qIkbSHHJ6K2RjbFvfSKqFtijofHiID3AvTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949dbbe25dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-07T23:37:29.554045Z","times_seen":519,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/platform/twfxcc/favicon.ico?2.2.1764825825288","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /platform/twfxcc/favicon.ico?2.2.1764825825288 HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:00 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1964\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGCyHmAYB3EKMm%2BnQqD0osPZQJYFmtnbPwj0imXTgMfZ348hm4N%2FZc93RmofAFAiXTsv45Fml1xP0cG6MlBOdypK%2B0J1rdkCgP4%3D\"}]}\r\netag: W/\"69311a90-b52c\"\r\ncontent-encoding: br\r\ncf-ray: 9d3949e28e99dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46380,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"1f43806265f1c1ac43ba7145fa576588","sha1":"d7ed2de2d608a9ee8250652dd474eb2bebeb17de","sha256":"4ea48de7a0fe431f9da475fee1e2a3920cd8e3faf75ba62b8f020adae6805cff","sha512":"4400966ad73e5f4a9e03477e5327c8693bef2a8bb28c028cf97847efbfc4af97b20ecbe316ed5b11c30fad60095920039fadb2bc8b98ad8f62047d671c7107c2","ssdeep":"768:xR86sUJ8MQclh5a1Ejvnl+5wXXcshAVgbehoLYkKa10zue3JHuVvFaQgGB5N9x+y:cq5lhgejv8wXMsWVueSEg1cue3Bu5LNB","tlshash":"36230223f1af0ac4eb4635b449123f12b55c9fe344468db287e54651dd29ec32cc9dad","first_seen":"2025-11-01T17:44:45.84035Z","last_seen":"2026-03-20T19:46:41.743381Z","times_seen":28,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0DZdgNl16DSjegZJ4nmxOABXpS21jj0cf8%2BPwT92t956sxj8tXYawdwKu8P%2FvonVDgga2TQNZLMhg4LRJM6b1rZyVMYmXGNWsJQ4I7P4g2CZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb7c41dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"dgb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BehC9rWOSq6TY6jKhKE9T00%2BeI%2FhSh0uV1mL9ww%2BcEklAJmug2bSrfY%2BUZUTT%2BpYRxKbdc8hSUHtHzSLLJ4bnsxb%2FxdcBcfGwbIU%2BP0z0TU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee7ce7dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40285,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1923fcaf6ffe6b3344947228517397e7","sha1":"aca197a215c8de595d39c2b6eae56b40fcc9241c","sha256":"8ae160d331e286655d65e86ac07fce0603ef398af6f3e6c21e4d3c682c97a133","sha512":"fd7fc4598f8dcff96e9d852115ab27d64236a2834bbef977b23cad9a772b3d61ddac95b5112a5a84ae7cde4ee83bb3806d8738e2d66528da63da1eee0e69c264","ssdeep":"192:UHeB8JpxhEzoC2zl6WIHlKyH7bM36UtUy9DmDPSOeqiUfhBUoCU+xVllwrviZFF7:UHeB8PbEcLz4W4lKyH3PUtUvFBPtnDsv","tlshash":"fe03b6f06a88d2cac432fd895fa3aef0061539934acc1dc285f91e3c7a547d1e1957ae","first_seen":"2026-02-25T18:33:15.282388Z","last_seen":"2026-02-25T18:33:26.765652Z","times_seen":3,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQ8MVZ2OSLZv%2Fwpakb3LJTd678eMbT9OZSwYmoYXnoeWiVNVxqZOHFds0xDMxkcFYDz0nyCsX4ir4ZptsvYwCb28%2B9tsI4CbHS36bzzygm8p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee9d28dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41952,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1382a309aee9a829b40b637522c46395","sha1":"481c33b85571197e1e8ffb92efd7cd6f6e8ccb95","sha256":"e2100905fd83190db22905d05eea837638bb648c463c799b06e2ad4f65fe3b9b","sha512":"ff568bfca1b836467ff1dcf300a3ad677900df5e32dbce4d869fed4829b935c44189ddfe452e966c9f1140da165ea1c126cfaf6ef1efc591f697fcf4c15c12d5","ssdeep":"384:nOE4+VvDBJai3OFBfeqlJ1LicY9RGOiSaRFJy6Z0R6PHZ+SHrV90seShSAbhsxG/:nOybABfnbvt66zUMLQTQrkG7G5Q","tlshash":"e8138e304ac9c458c5738cc25fa37ee87e3631c6e6de2f457e9808157ed4768a21dba2","first_seen":"2026-02-25T18:33:26.171974Z","last_seen":"2026-02-25T18:33:26.76655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/assets/index-aTGb2v-X.css","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:32:59.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /assets/index-aTGb2v-X.css HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:32:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:23:44 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311ae0-b9841\"\r\nexpires: Thu, 26 Feb 2026 06:00:12 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1966\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhA9Tp8hnzBOHk2gg7n6rAbBZ3AsbcOpa0vGX%2BUQ8%2BwDLMrKWFfVFTRP%2Bqd1ZXzTVhFvyucX3Q0hPpbFPWJ2mnYc8YBZUHJUuNU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949dbce4adabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":759873,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"9a098eb13366217e87a71d10199685fe","sha1":"1c30eafe808f2f651aaf66610d4e72797da20dd0","sha256":"9f46d903da5a70f9f36a4c8e082b316600d746384834ccce4c5df1bcac5f3b4d","sha512":"c2832cffa1fec70ce4c9fe8fa690a5d7a0eb5836d3eab8e2309bafb1f21167849b505711ecadebbc7b36b1e641075138d87328c34fac613c8d0c9f0ad9ce522e","ssdeep":"12288:qv1s9dZ8w71ZACkFDS3vyf58rBeV05TnUq4CA9VP5mTXV2Ru0seCdUm:qv1s9dZ8w71ZACkFDS3vyf58rBeV05TB","tlshash":"5af4d729b58410387e37d6a57fc85acce12cfa62d4424ee8f343605a4ec77f7276261a","first_seen":"2026-02-24T16:10:35.282803Z","last_seen":"2026-02-25T18:44:39.5539Z","times_seen":23,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhdgS3e7CKDSz9zIgxFN1igUhX%2FdCbdfwtYyMbHqY5jUkwHwsMCwbwclj%2B9pU9%2Bj4dj%2Fm3yujwBJCQdtn%2FsueF6yQ0GKM8ANzMytxuvab%2FVN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ea392edabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RISXWJ1oAn2p8vksKCXxPDRAvoaujQf4SZufneMph2U1NGoHzvuy4tP00VkbgcMHBS9E8U1zfY39lyQzcfig%2FjcqWiQi24TLgWAkAxEm0b3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb4bd5dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ltc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=d2302c104c7573a326b60e10565373c5; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUqtfg1ike2cAvxRmw4HPq639jVSyg%2F39Fj%2BzKsvsB0ybwZuf2O9jRj7CLjXZC5GlP3JVYS96LNZJLs1SAxdnrnSCD1jOii4RsdUms0IK9j%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee3c18dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36075,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"90c21078df2cfe223bb7de4e519fe735","sha1":"09c09ba7acea2b9d19e62993ef69b071b9fafdba","sha256":"1e02d70d4b73153c65e3e2251b6d2e85a4209abf2787d8c994522b0c2359248f","sha512":"71393109645e55ae75494a384e14374d5c2a617a8c4def7e037677b292851ec8dd62e0e88f2224f54b245b5f3b73ba7dae27a08b89caad653a55757ab6946848","ssdeep":"768:Nw0Dl+2pWQrfrlrbnTOBoLokdEUWEosITUx/g6lrTKjOyb:NwgPTTK3Eos2Ux/g6lrTEb","tlshash":"d5f280708e89d26ac4359cc21be7bce0862f33c706ce68d105ef54192ad5727e67db92","first_seen":"2026-02-25T18:33:26.768576Z","last_seen":"2026-02-25T18:33:26.768576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpjpy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1NnN1sOPRXwYh8W9snAXfP7tbqBAiPj3C84R%2FO3jchOw4sezVtC9ATO8FH%2Bke6k7ETIuXsWJWgAeZQHGMttDfdSR01MH5A5%2FB%2B%2BL8FW6kUP3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee6cd2dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44445,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"385844fa8c0e1288ad933d192faa4b12","sha1":"4996e707c6872869bfecf8dc7ea71c8bf2fee00e","sha256":"1b7fdee5092b5e6ecd833819862377938d9ebb0075f69d99c728e3ae941e5721","sha512":"d104da7894344ac2e2b7d530e95f179cb44ef2e294ecc1c922fbc84631289db62c5843c6ed90190102869bb06bf1921ab12a277f56c94e5564dc31de71d1deec","ssdeep":"768:Dv6JxNSRFJGxdrJYgoLg9JSBUT7f6TPR2+1zzxOJ+oLirpiNQBNs:uTNUFUxJ2g1wo7f6TZ2+1zlOJ+airpir","tlshash":"a013e5328e8ae04cd5314cc25be3bef28e1633e386dd5d413e9958469950b21e36bfd6","first_seen":"2026-02-25T18:33:26.232374Z","last_seen":"2026-02-25T18:33:26.770539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/a2a650f7246d4b0e96090af287b61841.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/a2a650f7246d4b0e96090af287b61841.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyPAEayd_eQnIPN-q3J8XvqkZxOyc_8sVzZpUZrW8IivNRzRygxaWUOoXDsFD0u2WgmSnivzlY\r\nx-goog-generation: 1745019044982235\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8388\r\nx-goog-hash: crc32c=LBL3jw==, md5=wryJC9aSNi74POLpGY0i7Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8388\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:30:45 GMT\r\netag: \"c2bc890bd692362ef83ce2e9198d22ed\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c2bc890bd692362ef83ce2e9198d22ed","sha1":"2da6624b154fa3c70f6d48fa0e32961622494791","sha256":"7c97f207862ee766fb394f50e87f423fd7285c44ce125fc51e97d38e54b949d8","sha512":"e801ff56b048aee4050bc1d689d8d375c5c04b5cd8c6864e4a283748084910fef16171feb86b114ea28bf4ca2da755f08a309b87f0d468b885a13ce6a34aaba1","ssdeep":"192:RX31VARGlYA23xrFPNtSbCPK+LBGVzBcv8VG51uDiXZtIJ9/2SYFrP:x3vARGlYA2RtSYL4V2UsuDiJ+b/2SYFD","tlshash":"1402cf08ff694f508cf499d2e1147aa278848df2b0210b48e3d7bab913983991ef35d5","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-06-01T14:32:25.092225Z","times_seen":65,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":98,"dns":14,"connect":33,"send":0,"wait":38,"receive":2,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/platform/twfxcc/logo_144.png?2.2.1764825825288","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:00.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /platform/twfxcc/logo_144.png?2.2.1764825825288 HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:00 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-6d20\"\r\nexpires: Fri, 27 Mar 2026 18:00:15 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1964\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kEl5PZzUhwr4SEP43Jd6tvNfBhCFvTxrzV0GI9hzxGECmGUp9D4w6RD%2FfW02t8ODH37CmOGgifOP69S058vrCabNwvQ8x14lK9c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e28e95dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"acedc2fc84b1d368ef0751d235635c91","sha1":"bf33aef8b2240f957faabe248e34cc5628ce94b1","sha256":"cebc2d9fab508f2ad82dd2f9116f47980fd633f6f0e526d49bf58c1bf2ed7af0","sha512":"78a88144cafce742f7ed1fbae7e3a9ad90258f27e3516ef36dc5709d366c27020dde2ecde3b23b08c1da29a449783dd46ed88dbb59e50be875341de9afe4b307","ssdeep":"384:Jn0UpAPT3/+qdnTsa3L58FvT7vRehS3ihDnA1WpyTQ2mLPsS3kXsL6kuaqTTfT:J0UpQff5M5N3+ACukEEf67r","tlshash":"67c2e1bd1a81c560760d6d47d6958132c14bf012fb968ec6d11ee6fe9e24c588a8f3cb","first_seen":"2025-11-01T17:44:45.832117Z","last_seen":"2026-03-20T19:46:41.797658Z","times_seen":28,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/light/spot.svg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/light/spot.svg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-59a\"\r\ncontent-encoding: gzip\r\nage: 1958\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yGd61hpzNbL55lJ6xIFr%2FRyeJSyHrWavbqPwe1n0MzGIa7ptMhFN%2F5JRE5KUTk%2BDyaygqDan4LMQzjEyBw42y66H14D0fBglzk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e5ee7bdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06ff7119039a86ea843fced4a87b0c04","sha1":"acf0f480f5288cc094e99382bbaaa21b9949135c","sha256":"f72d9dfe237a308134226955b517b808c348468794ccab477bbf478cd1c49007","sha512":"30b10c415d76e26ff9105a1803919314a81a3234d1254f3210eefb9e98ac35bc52ecb242a7cc2dadd1f01ebb3a0cf4bd774e6cba135cb89fb416560c18c8b58a","ssdeep":"","tlshash":"b921e0bf97c536d0d56beba0d8138022f2b7647a3b2c8b854e74cfda530e059c8d9460","first_seen":"2025-09-28T11:01:39.207607Z","last_seen":"2026-06-01T14:38:39.403345Z","times_seen":78,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3VPYD40oBfJ752WBQ1plB5cGB2S69gBuphkHte6kXSjHnHI8yPgbq%2F%2BtECw1eXpxEyixhgPDjW0BSl63zXn%2BRlOkEtSd3Xw9CFjOFgLRMGk%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb4be4dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzFT270PfNHzA9N9LYcSdHZVND5ScHf2YHtzyem6VgQaqnwiE6HsqcYdsrsF4ag3NYg8HFNHSY\r\nx-goog-generation: 1745020334043985\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1717\r\nx-goog-hash: crc32c=Nlh/mQ==, md5=wDYR9+ijfd9z5qYqQ+rRlg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1717\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:52:14 GMT\r\netag: \"c03611f7e8a37ddf73e6a62a43ead196\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"c03611f7e8a37ddf73e6a62a43ead196","sha1":"f5d6f08be3d751747f618cd7af90f4ec8dc3d97c","sha256":"a19e79dd72b71fadceabd2a6cfcc04b18738157e104b54cf960eb17ccd1cd6ee","sha512":"968346372809cade34940284062a06ad5811a15ff481584675cdea3d77addda5b6da00562479f7ac4a98a8a289d70cde9d409d024048039f354cbc5b200edb08","ssdeep":"","tlshash":"39313a46b4497a5e02e204ff815da62b0f99ee43f0f89308ae60d04c3d718cfc91a0de","first_seen":"2024-12-03T23:58:43.643729Z","last_seen":"2026-06-04T15:28:13.437662Z","times_seen":106,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxcctw.vip/resource/images/banner/1.jpg","fqdn":"gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"GET /resource/images/banner/1.jpg HTTP/1.1\r\nHost: gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b77f58e56fba5f45979cfa5789960018\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 05:22:24 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69311a90-8d53\"\r\nexpires: Fri, 27 Mar 2026 18:00:22 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1958\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbAb0R7QowFMyShJYTq148a1zQPIJqyK%2BDTf7GVjA2SE%2BoKjkNL4SucHxps9tvVm49IHZeEPxq7X3j3UPdDbGnsUBuEhrwWBeps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949e5ee51dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 714x400, components 3","md5":"e58429ca30e42c6a30fc2a6952b6627e","sha1":"a9012798d41ee89a4b10fb8b6679a3d4aa36b12b","sha256":"0cd45dd6b5188cf087d1908eda005d6b6face1a3eb9b3c4f2213166a84b87124","sha512":"65de29c1b05a8882ff303a3191f9d6faef6428cd7cf9afbe3048a460971d1476f88a65ac4333c52d12f7543cf35f3fd81385e6b9aeb5f255106dbd13336d2911","ssdeep":"768:16ikoFtGa5F+mlsHe2PTphfS83Cr2yfiAS+dL1Mn2CDbIQY6lskUXZkmV6WAtzH:DLthrp8e2V88K2kxdU2wIQ09X7tA1","tlshash":"ebf2021ba8e0b1d3c65f82787617349f4d07e7057802ad4b37843ba6ba0d771b46e6d1","first_seen":"2025-10-12T16:34:39.842006Z","last_seen":"2026-06-01T14:38:39.448727Z","times_seen":78,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:01.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTesGmee7n7t7gZSAKAUW%2FeZdQkS%2BoZINueSajfWTYIdrYeauia3e0zbVgdJ0ZPErrFOavcZWXuVb%2Bie8qYuTD%2Fo6dAhOAlAxHX1d48Zae8N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949eb4bbddabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"kava\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jlc18Q%2Fc5yPw95FMlV%2BpSeQUIsGNjEr2u%2BHW1pWfqG629F1BEJerD5iVd4MTuciBu20NUEkgIagUptK00WwbjQnVu9e6%2Fle7jzIeIu%2FWaqhh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee3c41dabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37460,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"68475787021ec5089ea996d3689bbe67","sha1":"2edadc3180cf58bc8bdab329192e3dba9240857d","sha256":"594e5eecb82e29bae4539c94b8716b338592612437feb884eb1adea5c16aab99","sha512":"28aca2046660c770716d233751b8c4be0bcc1d3a4b1d73f2f1c4723ba7bdde212572d784acc1de9938ffc50a1ee0cbe09dc3855505b4d5dab5ed20a774080cea","ssdeep":"768:pqaOWNE0j83U1DNsHKcb39Bl77caII37cH37cI5vM37c/3vd37caqKv037cN37cu:pqaOLtADNsqcb39Bl77caII37cH37cIf","tlshash":"87f208f04ac8d54de4f14c995fb36ee0729239a30add4dc241b9dd3479b62b0e198ba3","first_seen":"2026-02-25T18:33:15.235933Z","last_seen":"2026-02-25T18:33:26.77551Z","times_seen":3,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.gxcctw.vip/kline","fqdn":"h5-api.gxcctw.vip","domain":"gxcctw.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxcctw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 14:56:47 GMT","end":"Mon, 20 Apr 2026 15:54:31 GMT"},"fingerprint":{"sha1":"8C:DA:9B:38:AA:F8:CB:00:32:94:5E:82:F4:C4:C4:BA:D9:43:67:E1","sha256":"B2:FC:3F:84:4D:89:0B:A8:C3:2D:C3:4A:4A:A4:5A:2D:70:E0:65:A6:35:4E:EF:E0:8D:F4:5C:1E:C7:9D:31:CB"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.gxcctw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://gxcctw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"sol\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gxcctw.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=0f98f26732dda058b0c96cd3f93f6c4e; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HnXxbPvZXjZj%2B3ngVKdv6VZxySXbmrNSbx64nByKv%2FT4uL1Ls%2BbjUMpQ6ochEnpwpPaSC%2B42m%2F1vw22KeBCY45MwYJD9SY14lBGpWMg9v0TA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3949ee4c6edabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36634,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f02171f29f6223f2cf2b80cbe94950d7","sha1":"f486ef3dc850bca3a1cbfdc50b55801de0702224","sha256":"e8977cd5a27e3deb75e21d5c56c422a21f34828b18786d9cbffa362b02b7c52a","sha512":"6274b6d21ef9f37d10abaed32ec7f7ec9d593513994a560d8a4a4163690ae7e3d143bcf5978ec679cc488dd864caf38ed8b52bbf2d8640efa88fd857e2fd5e66","ssdeep":"768:HnuvkYZLa8yPQL0dUarm/Wr66jU/DKN6ox0McJ9Z5aIFgVjuSsyhcQYD:YkYZLa8gQodUarm+JwDxJraFyD","tlshash":"6af2b5708e89d34ac4365ce60bb3bce30b1637d306dd4a4145ee57111be7f2ba929b92","first_seen":"2026-02-25T18:33:26.77629Z","last_seen":"2026-02-25T18:33:26.77629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.gxcctw.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/4c48ad4889d7422e9ac37bc128ca2bcb.png?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/4c48ad4889d7422e9ac37bc128ca2bcb.png?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxpJA44WMh81YHhrBz-mNxfs8tA9mAiJQxZ0813P0eZkFQ3zFz1VQxLgF1BZMhEBZQWkkRgHCE\r\nx-goog-generation: 1745018951660884\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9807\r\nx-goog-hash: crc32c=bTyaFQ==, md5=EtlyJGF1nO//AtkHaj0nGA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9807\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:29:11 GMT\r\netag: \"12d9722461759cefff02d9076a3d2718\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-08T05:16:21.618678Z","times_seen":600,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":91,"dns":15,"connect":15,"send":0,"wait":19,"receive":2,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1764825825288","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxcctw.vip/","date":"2026-02-25T18:33:02.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:11 GMT","end":"Mon, 20 Apr 2026 08:44:10 GMT"},"fingerprint":{"sha1":"AE:01:32:2F:67:6D:62:C5:93:45:E7:9B:C5:30:4B:5A:DE:5F:57:A7","sha256":"9F:1E:63:80:5B:9A:BC:36:7C:FF:EE:EC:24:D9:0B:9F:04:3B:32:26:80:B5:60:D9:39:47:87:EA:6A:8E:37:27"}}},"request":{"raw":"GET /order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1764825825288 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzfmRDzDkCWic1s8JJ_m2ggol-vlRr4iZ2CkjpNaw9YJqQTzMZe0RzA8eAN8HBfY3hBf2i4cSU\r\nx-goog-generation: 1745019054266672\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9320\r\nx-goog-hash: crc32c=NRpzvw==, md5=8Rfh7LmmWZKkoSeq5xR/PQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9320\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:00:26 GMT\r\nexpires: Wed, 25 Feb 2026 19:00:26 GMT\r\ncache-control: public, max-age=3600\r\nage: 1957\r\nlast-modified: Fri, 18 Apr 2025 23:30:54 GMT\r\netag: \"f117e1ecb9a65992a4a127aae7147f3d\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"f117e1ecb9a65992a4a127aae7147f3d","sha1":"d31cb59eef02bef662f2a32927486fdb0bba9938","sha256":"c41539a30a96d819192c0088fb339eb265079a33b835550da4d67e239ea658b9","sha512":"82a5726b19387f79608c7ca92ead96d09e0bce5d08ca0c607b93412e5110607926ae426b869bd993a72ad0f586bf82c39099ed02e051fa0a573db3ff1345444a","ssdeep":"192:afKC5CG/uzpL2j2tll1RXLhL2yjT0qLiaOTMNEdiq:ayCEaQLzRbV2cTLLiaOTMdq","tlshash":"90128d85bd31deecfdaec33917d3a316e293e93b26d149a851026b1048d3a3e5217635","first_seen":"2025-04-17T23:40:09.012509Z","last_seen":"2026-04-07T11:52:26.867546Z","times_seen":89,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}