{"report_id":"a15fcf39-feae-4a0b-822f-32339e8d4e25","version":6,"status":"done","tags":[],"date":"2026-02-24T16:01:11Z","url":{"schema":"http","addr":"h5.zetagl0bal.com","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":0,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"title":"MAX-BTC","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.zetagl0bal.com","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":0,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T16:01:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hw.rangwodf.cc","ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-12","domain_rank":0,"first_seen":"2025-06-03T12:45:54.191815Z","last_seen":"2026-02-19T15:44:14.989928Z","alert_count":0,"request_count":1,"received_data":5023,"sent_data":372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kk.zetagl0bal.com","ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2024-09-12","domain_rank":0,"first_seen":"2025-08-04T13:33:35.916282Z","last_seen":"2026-01-22T19:17:29.107355Z","alert_count":31,"request_count":31,"received_data":1210880,"sent_data":14371,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"h5.zetagl0bal.com","ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"domain_registered":"2024-09-12","domain_rank":0,"first_seen":"2026-02-24T16:01:14.789305Z","last_seen":"2026-02-24T16:01:14.789305Z","alert_count":33,"request_count":33,"received_data":4568800,"sent_data":13744,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.zetagl0bal.com","ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"domain_registered":"2024-09-12","domain_rank":0,"first_seen":"2026-02-24T16:01:14.790634Z","last_seen":"2026-02-24T16:01:14.790634Z","alert_count":19,"request_count":19,"received_data":68561,"sent_data":9769,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-16T13:15:59.480294Z","times_seen":4457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a29c6a6651a06690b0d6e9e1cb813d76","sha1":"5f7b557000783cd980ebfcb498c0efedb6656279","sha256":"6af2d3b27bcd17c7ca63a87d3dfb44080cb5c42f895f0ed915c36b858224f5bb","sha512":"fc3d8baa836da527149c80cfbf4ca84cba4d9f5f453465efb87ff415ba7498cc936be3558527a68a59a5c824151df7d427e723407438eadb8e7f0ffd28c6eb27","ssdeep":"","tlshash":"39c08cc4b0c66e001606651010af24e49024402670481b028c94d8482e220b09237e98","size":138,"data":"","first_seen":"2023-05-09T06:03:35Z","last_seen":"2026-08-09T13:48:46.178536Z","times_seen":904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-16T08:09:22.005691Z","times_seen":1741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-16T15:36:11.300729Z","times_seen":7257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8e13434cc89cb1afebf561566ca337c","sha1":"6db592dd4553ff39b312deee4373433eff2c974b","sha256":"cdba9a532356546228930e961008a9786a7029d93e4b1859a1d360ff6a6a6189","sha512":"aacf3abeff52f602a5dd1876f411062007df5dabe6f408e36693fd2dd9992dcad9423ad2e694b251501e6d5d56bf666f665f901413e10fe030ad78f58cd32702","ssdeep":"","tlshash":"a711abfe2a1a602a6307804e976b7801643250b9000e184177cc9b9dbbaab7dd0cfb8d","size":1048,"data":"","first_seen":"2026-02-24T16:01:19.528314Z","last_seen":"2026-02-24T16:01:19.528314Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-16T17:27:19.407299Z","times_seen":41506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"338a9fac24d8e9eb7eca99e84b829fdb","sha1":"7a81d6a12ee875e2181818ac6d54ebff81848085","sha256":"9538e036ace74824a3fa7b843c7088dc541e0a6350325e3711ce96d34718b4a8","sha512":"6cadb556b277c643d0958d4116f6bf12a64f9afbf45c08c90203d43493310b784e94d293c6820d104fa0aced91d1c1ff7428b25b65a983d427a8f44ec41eb13d","ssdeep":"","tlshash":"8ac012e631a196042d7007395acd1e21f4114333884c460e78bc5c002f734001168c74","size":192,"data":"","first_seen":"2024-12-02T08:41:53.660962Z","last_seen":"2026-07-29T22:52:22.750443Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-08-13T04:40:10.698611Z","times_seen":1826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/charting_library/charting_library.min.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-13T04:40:10.635021Z","times_seen":1317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","size":4366,"data":"","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-ef6d76bc.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ce925c7aeb1905c0f357c6a4acb88cd8","sha1":"7cacc2ed99c9d5a5641965952cc7bcdc1dae9d10","sha256":"be0df7ceef3b04bd394faf550692e1e133ae0ec091f50bc4ccff17a70f8706e5","sha512":"b3d5e8ffcbb8084b2e27e969c778306ca012548c232c7780f754987f9edd65f90d8ed8c66c6c799600c19df8dd5c1efde7ef4c54ef341c76fc3d82c656567906","ssdeep":"","tlshash":"bd01fdf8fc0ccebb0ea20a5001903600140a1fddfa1419e198867d6a1be4940d7ce72d","size":776,"data":"","first_seen":"2026-02-24T16:01:19.440543Z","last_seen":"2026-02-24T16:01:19.440543Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/currencyItem-33c14536.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"377cf2a68809a52d685285dace1791a5","sha1":"fb4b2da6afd7299d01a1ea9da1bf3e35943f3669","sha256":"7984f028d9e430422c75a7f11447370a36049c20f82f4e34fdab62622d36eb2a","sha512":"ff212016e78655a5bf9ccc2b34636c0e4aa9987d75084d90a02965f21b7b9b266fe3ce7615e2a4c70f46efea1b27c0d0dc00c8bc83646e81583f9bdce2ec793f","ssdeep":"3072:E8YlaWh2/mFDWg65nxpMFh/lwFoFUynlNjS0LQQw4zUz1:qaT/eW9klTFUybEQw4zm","tlshash":"385438eae315313297af13d6a46b07069333659d1946841cbabcc8f7181988d32bff76","size":283562,"data":"","first_seen":"2026-02-24T16:01:19.458552Z","last_seen":"2026-02-24T16:01:19.458552Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-bb257bc3.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a71179346a3e4fd25f5133a62d5046","sha1":"ee210529a03121e8a86d1c99c1f31284a108ce8f","sha256":"806f2c780006c9ac034cabd8ddb44840443a40fbdd2cd6b53c995ea2be1248a2","sha512":"a6a600b3f1b363f33ff3f25aa0f09898f405efcf793d87528fcb30725f9364f70269f4bf5c8b18037510e983f6440ba65299ea2db38bb9cfd9f3c0733f434a55","ssdeep":"384:JNb7Ftt9wdfqIEGnRzKpoAamuVLyN9HaaWvP/aRhCsTNT48l:TbB/9wd3NK7amuViaP/aRhCsTx44","tlshash":"2e42c756f6059a38e9bbb012409c0410b72dbfea100acde2f5bd6d963357ef8bb4d614","size":13087,"data":"","first_seen":"2026-02-24T16:01:19.515734Z","last_seen":"2026-02-24T16:01:19.515734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-10T18:17:33.062804Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-08-12T17:51:56.992196Z","times_seen":947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-13T04:40:10.69451Z","times_seen":673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-13T04:40:10.677471Z","times_seen":1398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"64b96e9d7c04d3598ab532838c31de71","sha1":"50bf331694a9b804ce6fb6e5a7c50a5d10cda588","sha256":"20c2add6faaa982c624763d066d770a8640fa28a9ffe5bc6fa9128a1793f56aa","sha512":"f152250e0b9799dc010c8f86eea655f3c6afd8b6b899b69ee82b26769c71b7522c318f1a8c5d7d0e2c09e15487b410fbefabffdae3d71ec14da2b4776ef5a9c0","ssdeep":"","tlshash":"a2c08cc4a4c27e10260a651018ff26e89034402770485b428dd4d8492e230f09233e98","size":145,"data":"","first_seen":"2023-07-14T08:52:05Z","last_seen":"2026-08-08T09:33:40.052556Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-13T04:40:10.690415Z","times_seen":467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/en-6af94b74.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a5d04804402a487bf67716740224731","sha1":"d8547ffc67558c748ccc36889ef0be6c7c38db19","sha256":"6f99556d7693ccfeb2c4a243351d15436a58d5920be7b3e7e5071a344853efc9","sha512":"e900758757a53c4fe214cae65e0c84289d6edc69eb8ec33807dc50b2ae38502d7222d35e58d54585deae224b939630e953ec87bea5423157f482ad8958ff106c","ssdeep":"768:+GtZcEw/o7rKOd1FsifQAMCUrAaAMDVoP6+6sPG9w1mwO6fpk7aOLxO:iponKOdTbXUrdDVLsPWwqLxO","tlshash":"b503d6893e1a989a04f3537674ce6e1160f60ac18255881f4fedc9fd93d2b67a363b34","size":40578,"data":"","first_seen":"2026-02-24T16:01:19.473131Z","last_seen":"2026-02-24T16:01:19.473131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-16T17:27:19.407982Z","times_seen":42953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/filters-262d5627.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f5ba5102c897ddb3fa50df664e217c78","sha1":"5a1a9ce80e63802c5bd3c7291a1d63649239f589","sha256":"affb835c3d65970857218c3b14ebbbd6eff42a3da31981157ed1a451621e6110","sha512":"6f4c41ffc70d3b1ce590d8a748cc30e43e8e0ae32b75f5dcd248dc4f8cb6d8ac67390b589c0f3e33da346946574eb6f2ce8fac464953c4602078b78519dddaed","ssdeep":"","tlshash":"b55113fdfcd7a13356ea6ef940288454728eae20686e0a4df54bd0455973888e07f768","size":3102,"data":"","first_seen":"2026-02-24T16:01:19.49778Z","last_seen":"2026-02-24T16:01:19.49778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-16T12:17:00.785775Z","times_seen":3439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"41bbcc2c56aa15aca722543a89a6c730","sha1":"406498af64c571b878803bce96126d82f84fe1fb","sha256":"dcdb9d7d09bbc4280e61709eba14765c1788e29f96bb2d757d7e41e1ca174807","sha512":"48052a6d22581aefb3f456e7ef17080ec74175298ef4d6f05275e19043375211c712175b86b2a51347902345cd7d2d47535dc383acc4b70757be798e6d778136","ssdeep":"","tlshash":"bcc08cd4a0d62d002a12a45430bf25e890344026b0486b03ccd4e8592e234f08233e98","size":148,"data":"","first_seen":"2023-11-01T14:09:04Z","last_seen":"2026-08-09T01:13:35.323823Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-08-13T04:40:10.683444Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-8ae3aedf.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"da89ffe4df3372418ba368e1e5589872","sha1":"6ea579194de5d9ff10a92cafd722d5e11f1140e6","sha256":"7c17a9e7318b9c01337ad35979f7b7a193ec52a6da94efbbe1f04c51f8627a27","sha512":"dcd7a85c074c094f54c7fc93e36bc2d93053a4a9f818586c6f22518a144adee1dff7ebc1a39c4c87d2a718eed84bcd470f964024c1d6871c64499f39e68e6812","ssdeep":"96:E/+vfp9YIqD+wSvxQMy2ob1ki5Rbt33hvzA3XvNth+j7:c+vf7YIqiwSy2obiKnhv0XFs7","tlshash":"f1a1b899f80285bae97714440848041121ac7bfab21588f1fbbead0a67b897dd754362","size":4669,"data":"","first_seen":"2026-02-24T16:01:19.457174Z","last_seen":"2026-02-24T16:01:19.457174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-08-13T04:40:10.676935Z","times_seen":1672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-08-10T19:08:49.499677Z","times_seen":605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-16T01:43:13.048438Z","times_seen":1721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/vendor-3e6db715.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d70a36d2c7a3ec7f1e2b24c8f277c2c9","sha1":"d51a46053a126b38fb9e12cbc9cf5f130e901e59","sha256":"30964ffaaec8ca2b548d2a75a8ad0a52c1233e44ca833df72b48be81390b2dba","sha512":"c1bc6eae947fe6c700ce67f7dfe829f8ea004574a0614a98c93286da12b7d6c08e418d84984ee5ff28801e3b23c9714a55cc13c0fed514d080f6314a7c0fcb7f","ssdeep":"12288:Fry0h5NhF+Dif1J4FbBVbHkB7/suxzFS74NbTU+3WhNWualV/+YPYNj:Fe0fNhF91KNBBkVxzFShphNWual7w5","tlshash":"29153ac57292f06147ab20e240bb0006f3396e59744e84a8f16dd9db7d69d89e2b7f3c","size":890845,"data":"","first_seen":"2026-02-24T16:01:19.438491Z","last_seen":"2026-02-24T16:01:19.438491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-08-14T20:53:49.405134Z","times_seen":1785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-13T04:40:10.698113Z","times_seen":2172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-0943bf7f.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc591a9ba5d3fa90a7a0af5707248127","sha1":"85735f8491b53115f0581118c5c058c2d385330b","sha256":"78a7e4ffe6aa075a26caaf2ac03f292b0cd33097d6b209ca9e9c8edc6d1591b5","sha512":"f5335db5a213a692b7942708116bdc77c6eb75baffcb0c40c51e8e0ac93bc7392ec8c5079fecdc145a4ac0e4bc0142d88d925cc5f968b434acd8332079ab7973","ssdeep":"768:Yr3W6B3m/gYSu8y/YeTrwOHN2F/Zu0obZtj213GqJXZQz4MhS/2ZTUb1Jsg4XnGu:gAPDT+Ft13TzIuBJsgh+y/GaRFGV/","tlshash":"a0a33c89a40a1fbf6cbd0894a95e590031780fd3598dcc93b3b96e893bfacd4635971c","size":101826,"data":"","first_seen":"2026-02-24T16:01:19.45383Z","last_seen":"2026-02-24T16:01:19.45383Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-6e382038.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"48ac7477e476a780faba92e61e09288f","sha1":"999daa9fecdc31bdd437007705147abe9f926695","sha256":"34140295b38161d8d2aa0396f4a45dd107f06848fa5a21200aace5cf5163b074","sha512":"d8b51a563e44d6113b97cf4342c1e52b3fef1424750e48fabdbf2f175af7a24053e6703f218f67cf8b78673f9c5212a3f406ab6e9ca58570f2817d8b432243d3","ssdeep":"","tlshash":"90f0057fbd6680b11bb348fca1631820b9281f072754c4d4d4871e14c774ce7e51e614","size":510,"data":"","first_seen":"2026-02-24T16:01:19.494292Z","last_seen":"2026-02-24T16:01:19.494292Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-08-13T04:40:10.693998Z","times_seen":1414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/#/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-08-13T04:40:10.68989Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/bitcoin.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/01/bitcoin.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2691\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"bitcoin.png\"; filename*=utf-8''bitcoin.png\r\ncontent-md5: Lt8e+LMzxAl5l20aSbwjTA==\r\ncontent-transfer-encoding: binary\r\netag: \"FtdawSeVtKlXXIdOGxkHEs1iqHr8\"\r\nlast-modified: Tue, 01 Apr 2025 09:44:22 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: NtS667OUc\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: cMEAAABk1Q2UN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-16T11:36:50.481479Z","times_seen":25942,"resource_available":false,"data":null}},"time_used":1744,"timings":{"blocked":1004,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/lever.jpeg?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/01/lever.jpeg?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5326\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"lever.jpeg\"; filename*=utf-8''lever.jpeg\r\ncontent-md5: xY9MWwceWRKDbkXAGvqeAw==\r\ncontent-transfer-encoding: binary\r\netag: \"Frb34qKPkEH6xCrNabhxP9gR6p6l\"\r\nlast-modified: Tue, 01 Apr 2025 09:46:57 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: QVcuXk7sn\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: o6gAAABpABaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"c58f4c5b071e5912836e45c01afa9e03","sha1":"b6f7e2a28f9041fac42acd69b8713fd811ea9ea5","sha256":"ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3","sha512":"d61e62b7171e37d01a1453feaf4685f922dad6afe642d687afd248eda211886d2b75d3afe06dbe9fc5bcd483a28cfe3f4541f0a1af9325c0a3c0163bb74a29dc","ssdeep":"96:emHUsasfObCPgp0gc3oj3OSj6rTvdv6OzmrzobXdslboM65PHMZ1:uJO1Yp0gtjhjIvdv6OKrzobN465MD","tlshash":"c3b16d72b762d9d8c519e1f1da024ba2600d6e7b01bf9cc95f6d1d9119f4081cb813cc","first_seen":"2024-06-11T12:53:28Z","last_seen":"2026-08-10T19:03:29.511349Z","times_seen":288,"resource_available":false,"data":null}},"time_used":2059,"timings":{"blocked":981,"dns":0,"connect":0,"send":0,"wait":1078,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/0c24b07d8766472c95f8ed0d3fd4a596.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/0c24b07d8766472c95f8ed0d3fd4a596.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 14263\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"0c24b07d8766472c95f8ed0d3fd4a596.png\"; filename*=utf-8''0c24b07d8766472c95f8ed0d3fd4a596.png\r\ncontent-md5: eHPUHWaSNJ8Is9NeDTRIIg==\r\ncontent-transfer-encoding: binary\r\netag: \"FqaIHNa5wFOJo6ZZwvhQSWWhy7Rc\"\r\nlast-modified: Fri, 20 Jun 2025 06:37:44 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: L879zjyE7\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: G_sAAABwIRaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"7873d41d6692349f08b3d35e0d344822","sha1":"a6881cd6b9c05389a3a659c2f8504965a1cbb45c","sha256":"8e2790614be0aca4935fc84c995d89457b5216cf2ef7c658ab511aa025e89c42","sha512":"461236c8aba177de9b1c72748c13d6d502eeffae037bdf7fcd7456e9ccece264e1a56f10142028dfb4855cd71b936efd98411c5c6cb5073c5f9dc69ff39c111d","ssdeep":"384:Mx1V+atZnxQFbQInwNK97Vcbe3SKgwW70Ej:UV+0nih9Ro0Wpj","tlshash":"3c52c04e921691fa74cc8849dd37b11fa944491a323770cd6b82b40e72aebee0f4947f","first_seen":"2025-12-21T16:32:24.702243Z","last_seen":"2026-05-27T00:23:28.923521Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2146,"timings":{"blocked":960,"dns":0,"connect":0,"send":0,"wait":1185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/aba08e235aca45c9803e94b3e4d912d0.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/aba08e235aca45c9803e94b3e4d912d0.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 27596\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"aba08e235aca45c9803e94b3e4d912d0.png\"; filename*=utf-8''aba08e235aca45c9803e94b3e4d912d0.png\r\ncontent-md5: kzsU8wrj7afq4OMKPWfzeA==\r\ncontent-transfer-encoding: binary\r\netag: \"Fmn26aafRZCOh8lcQovFKLvjOcl3\"\r\nlast-modified: Fri, 20 Jun 2025 06:38:15 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: WSdBnjzkI\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: WAYAAAA6FReUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":27596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"933b14f30ae3eda7eae0e30a3d67f378","sha1":"69f6e9a69f45908e87c95c428bc528bbe339c977","sha256":"808c1b444b35e702491c1ba2999921ff5be3d090adc87ea35d14baa866e32fe0","sha512":"50b44ad1ed893acaf5c8adb12eee0a74c6c55ee5d56b2b78ea8d15e6817043ae6159b7ad0990d7d25e2be0db793b37c2a7f74edfbcb74b06dc396ead004499a4","ssdeep":"768:ip4XPeWMFj6AS/S147IoUzZCzK9A0G2mt6yid:im/wFHSl/+0zK9A0GftbC","tlshash":"64c2e1f84f7b49876ca6e85d93c494e1002d580735b44e3cec5c7c33982c252abea65b","first_seen":"2025-12-21T16:32:24.669861Z","last_seen":"2026-05-27T00:23:28.924127Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2350,"timings":{"blocked":952,"dns":0,"connect":0,"send":0,"wait":1233,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/04/186ac37a6e144608af3e35c7d5d77887.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:55.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/04/186ac37a6e144608af3e35c7d5d77887.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 11720\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"186ac37a6e144608af3e35c7d5d77887.png\"; filename*=utf-8''186ac37a6e144608af3e35c7d5d77887.png\r\ncontent-md5: TTUiAIYfraUzQcVUuhU+Mg==\r\ncontent-transfer-encoding: binary\r\netag: \"FhmsqLy-KJ1vz40NHCQESSh6sobr\"\r\nlast-modified: Fri, 04 Apr 2025 01:33:03 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: GrRbuLmcO\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: nOQAAAAj2Q2UN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 343 x 156, 8-bit/color RGBA, non-interlaced","md5":"4d352200861fada53341c554ba153e32","sha1":"19aca8bcbe289d6fcf8d0d1c240449287ab286eb","sha256":"cded73e2b924fbf38490200a807fe461f3d78ed2c2b623f86c8ead9f94cf2e37","sha512":"16861faad6ba029912bb4cf33b0cd097eeb795ac2d12ad046a1f7df6587a5aea5f752aebb8c20ad8f23ea842ff325a07318adebc5a05c936825233105dafc996","ssdeep":"192:SEQ4+d96v+YwwD9Tv1OdwwH2kIy+7RstXHCsEf6kIrDoRRXoYnEyQKUqM7S:SDd9xYrI3Iy+7Rc3XDAotylUl7S","tlshash":"e232af1df659b38fd092ca2c3f81d35e651ea50cb0d86d2c61d42e0a6662fa55bc7128","first_seen":"2025-08-04T13:33:44.890809Z","last_seen":"2026-02-24T16:01:19.43628Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1427,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":1232,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/vendor-3e6db715.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:51.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/vendor-3e6db715.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-d97dd\"\r\nexpires: Wed, 25 Feb 2026 04:00:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":890845,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70a36d2c7a3ec7f1e2b24c8f277c2c9","sha1":"d51a46053a126b38fb9e12cbc9cf5f130e901e59","sha256":"30964ffaaec8ca2b548d2a75a8ad0a52c1233e44ca833df72b48be81390b2dba","sha512":"c1bc6eae947fe6c700ce67f7dfe829f8ea004574a0614a98c93286da12b7d6c08e418d84984ee5ff28801e3b23c9714a55cc13c0fed514d080f6314a7c0fcb7f","ssdeep":"12288:Fry0h5NhF+Dif1J4FbBVbHkB7/suxzFS74NbTU+3WhNWualV/+YPYNj:Fe0fNhF91KNBBkVxzFShphNWual7w5","tlshash":"29153ac57292f06147ab20e240bb0006f3396e59744e84a8f16dd9db7d69d89e2b7f3c","first_seen":"2026-02-24T16:01:19.438491Z","last_seen":"2026-02-24T16:01:19.438491Z","times_seen":1,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-ef6d76bc.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-ef6d76bc.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\netag: \"68bc016c-308\"\r\nexpires: Wed, 25 Feb 2026 04:00:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"ce925c7aeb1905c0f357c6a4acb88cd8","sha1":"7cacc2ed99c9d5a5641965952cc7bcdc1dae9d10","sha256":"be0df7ceef3b04bd394faf550692e1e133ae0ec091f50bc4ccff17a70f8706e5","sha512":"b3d5e8ffcbb8084b2e27e969c778306ca012548c232c7780f754987f9edd65f90d8ed8c66c6c799600c19df8dd5c1efde7ef4c54ef341c76fc3d82c656567906","ssdeep":"","tlshash":"bd01fdf8fc0ccebb0ea20a5001903600140a1fddfa1419e198867d6a1be4940d7ce72d","first_seen":"2026-02-24T16:01:19.440543Z","last_seen":"2026-02-24T16:01:19.440543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/solana.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/01/solana.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 25649\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"solana.png\"; filename*=utf-8''solana.png\r\ncontent-md5: ZwxyOrwiBWvFNoyiqX3Wog==\r\ncontent-transfer-encoding: binary\r\netag: \"Flumm5FRgMMeTTWlJKneezQJ74Co\"\r\nlast-modified: Tue, 01 Apr 2025 09:49:48 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: FjI4YZN3r\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: Z38AAADm7xWUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-12T17:51:56.924988Z","times_seen":942,"resource_available":false,"data":null}},"time_used":1615,"timings":{"blocked":988,"dns":0,"connect":0,"send":0,"wait":565,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/11/06/51d40b460c9649f09d01d87fcec55267.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/11/06/51d40b460c9649f09d01d87fcec55267.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 6925\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 9464179\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"51d40b460c9649f09d01d87fcec55267.png\"; filename*=utf-8''51d40b460c9649f09d01d87fcec55267.png\r\ncontent-md5: //eIoL2Le7j+CdbSoH0fug==\r\ncontent-transfer-encoding: binary\r\netag: \"Fmfm4As05Q3I1nGD-n0t_e7XamQB\"\r\nlast-modified: Thu, 06 Nov 2025 09:02:40 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: cMIXWXQGQ\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: MAkAAABQmMd5mnUY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"fff788a0bd8b7bb8fe09d6d2a07d1fba","sha1":"67e6e00b34e50dc8d67183fa7d2dfdeed76a6401","sha256":"6e8c539e1fb49c4ef5cde9811087b99984ff948b680fcffd063a979fa7b2e844","sha512":"d09769e5ce6c69203512edc24e0bdc3f3a559241cf11eefbe1c07f3508fcd7d2f6eeabe6e422610821423d96c14a3b57db37411e062031646fd37c642055a149","ssdeep":"192:KSghA2SOxr6HeQRoQ0OnULzkYffNpZfqmFeRTsdw6JxASs1:Fg7Swr+e450OtYXXZHGAs/1","tlshash":"fae1afb96633b6b79471b502f0931e44283f9f3b39b853c7f7e40ee429d1924a88d484","first_seen":"2023-11-01T19:36:22Z","last_seen":"2026-05-30T09:46:19.908426Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2072,"timings":{"blocked":978,"dns":0,"connect":0,"send":0,"wait":1094,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/74a14e22fb1849a5b7280c11cfa4506a.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/74a14e22fb1849a5b7280c11cfa4506a.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 20559\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"74a14e22fb1849a5b7280c11cfa4506a.png\"; filename*=utf-8''74a14e22fb1849a5b7280c11cfa4506a.png\r\ncontent-md5: eQZAxWUudnQGM49bwxjq5w==\r\ncontent-transfer-encoding: binary\r\netag: \"FuZ1AJLn2b8VVH_0LlAODLn8B3F9\"\r\nlast-modified: Fri, 20 Jun 2025 06:47:39 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: 6O8sVGtQL\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: dvAAAAB89RaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"790640c5652e767406338f5bc318eae7","sha1":"e6750092e7d9bf15547ff42e500e0cb9fc07717d","sha256":"257328d65db62be254021461b0c8d30bac50c12b003e643a570c9d05215c18e4","sha512":"904261912aa02de81c1416ac8acc3c7de4cc996da65b6db989525af1d1a9f1b8ad77381433665b14641cdaf599d598e6c3afb535f66a7b3732fd44b4f717690c","ssdeep":"384:QcwOhzZrntoIoiHJbC/PTVDlgnRCJJ5Xo6vYGl7KxE4H4JFfYlPqkewv0d0:Qc7FWcHJbC/PT7Z6YdOEi4JFfY5qkewh","tlshash":"b392d01ed4b39a7720f36521cb59a318ac537c9f9e9f028c8c6a989e7f4724448d122b","first_seen":"2025-12-21T16:32:24.679294Z","last_seen":"2026-05-27T00:23:28.910496Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2191,"timings":{"blocked":957,"dns":0,"connect":0,"send":0,"wait":1206,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"97b931c99da28660c53ba24d0459dcb1","sha1":"66860df025bd2305dba1637819c9d44254983676","sha256":"5b9fecc7440642682e2b5b69b2d04ccd3c3998b58c9ff4d358251217d9b373c8","sha512":"a899974fdd25a475f1fe0f84f4707e168f92fc03f7790607993a64c953a2c8f1f5e6b22d1c4054b8463f6065b5b26d148bfb116d693e730e521b9186cae7577c","ssdeep":"","tlshash":"04f0c98f14bc8eb9181948c768cdbcc992ae1643d374cd30a6bbcf2c81f25bb1b06108","first_seen":"2025-08-04T13:33:44.858976Z","last_seen":"2026-02-24T16:01:19.444819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getAllSetting","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13707,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"10452a2df47e2ad663439bb3a90011e0","sha1":"bcb9e9d7c3aa801d1ffba500328e1341821ffcc0","sha256":"d8210270c63b9ee6793afbc347434222256335ae4d1ac8745497677723984acc","sha512":"8344183c887c504bc603e53968dc098d4b00ab3df6226425441a1f5fef2c20d90bb755482cbc7853beff5c02208516b1c5b3b2f2b013503c900e38354988b44a","ssdeep":"192:Nytj3twnOSpQ+s5D+RbSc2hN5iKH9FQZ92i9WpNFdM1WSKi/X55Wq6jkre4lXZby:sqi79qd1miRrvWyWAm2C7","tlshash":"a852649e31dc9cbea6df16c290ef2655b4ec1857d89cad15f0ebef4cd8925b8040b049","first_seen":"2026-02-24T16:01:19.446725Z","last_seen":"2026-02-24T16:01:19.446725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getCoinList","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26742,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (26726), with no line terminators","md5":"d9d870d4e7c7d1d81eb2580a48f717b1","sha1":"ebf8f99993d068a6c7be169a6a11b54ca703508d","sha256":"9da0a775d12d2e149f64ee4af52d475dbb448e992b089597192e079240600b2b","sha512":"271921fa47236aed7af2074a2a72a03e852a97a0e394ccc37344a36bcc58d1bf94f8258d8112586f4ebbf85db43790deb6d75c570e67efe2c7f6ad81aa6f896a","ssdeep":"192:ogMdSyEX6WXgkEXsZXdDcXgIXmi0XCnXHHlXIUXAqXtez8SJguLAwXiwY/K7DYf8:FApAdAHwfBkc71n","tlshash":"46c22396216c94bdc57fc0d12eaf7d1250dd352fecc98e2ad2ce8d988ed5ab4150af02","first_seen":"2026-02-24T16:01:19.448726Z","last_seen":"2026-02-24T16:01:19.448726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/litecoin.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/01/litecoin.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 34858\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"litecoin.png\"; filename*=utf-8''litecoin.png\r\ncontent-md5: uyfDaaOqVNnB+OWeFwbaSA==\r\ncontent-transfer-encoding: binary\r\netag: \"Fn4blncwXK1AtoaloQd9pXxPbPB_\"\r\nlast-modified: Tue, 01 Apr 2025 09:47:03 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: ISCpsT8tC\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: vfgAAAAr4hWUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-12T17:51:56.953618Z","times_seen":896,"resource_available":false,"data":null}},"time_used":1924,"timings":{"blocked":994,"dns":0,"connect":0,"send":0,"wait":862,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/21/c1500c82116e4872a6479b64c81815aa.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/21/c1500c82116e4872a6479b64c81815aa.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5501\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"c1500c82116e4872a6479b64c81815aa.png\"; filename*=utf-8''c1500c82116e4872a6479b64c81815aa.png\r\ncontent-md5: oB7p/jVMuYuAZ6i1niFnfw==\r\ncontent-transfer-encoding: binary\r\netag: \"FkHzGtC3T6ZzRMBWi7TLtlj8R4V9\"\r\nlast-modified: Sat, 21 Jun 2025 03:17:44 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: HulcqURVk\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: F8wAAACaRRaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit colormap, non-interlaced","md5":"a01ee9fe354cb98b8067a8b59e21677f","sha1":"41f31ad0b74fa67344c0568bb4cbb658fc47857d","sha256":"5fc5015490ef556b5aa82b6ce61608203107b46156fff5c5568dc3fc41e4a76d","sha512":"4f9704a006cab8dec0acecf06479e44d89444ca3fc2ea0e45ee21c116c17110e1306fb6668455233edca5e23eec0f6cb0c4def465322f3de259f001f0b642f31","ssdeep":"96:Bga3Ognj8OX8rHsp9j+/OhERjjkMiklp5RGCeNF1J3LjokrPh:BYgnj8/S1+xIMikl3R0NF1NjokrZ","tlshash":"46b18d85dd403ee0ff36f55665eb186216815e80f08764673deef10b5b3d839482a1c3","first_seen":"2025-12-30T00:29:18.441879Z","last_seen":"2026-05-27T00:23:28.903601Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2309,"timings":{"blocked":955,"dns":0,"connect":0,"send":0,"wait":1233,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1105,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"80e1a9bcfed127026dedfbcc99d12642","sha1":"183b0f41f9b5a0d54bda86e720c4d602207f00c2","sha256":"321127c50a989790489ed04256fdc1d9ee55501bcc088014250286f888d15958","sha512":"549d07af3d665c9185863baa363d88a9f8e528e01b7c6c7ce482f3c8935010815d925b640fc720e4691f217292322222fc9c6f0ee2f97dd4a0c6de42ca7500d2","ssdeep":"","tlshash":"cc11004a223c8e71441611b373ccfdc9a2be1697d6a28d38855ecf2c03f14b9172b585","first_seen":"2025-08-04T13:33:44.843054Z","last_seen":"2026-04-06T13:35:43.765317Z","times_seen":16,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-0943bf7f.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:51.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-0943bf7f.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-18dc2\"\r\nexpires: Wed, 25 Feb 2026 04:00:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101826,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"bc591a9ba5d3fa90a7a0af5707248127","sha1":"85735f8491b53115f0581118c5c058c2d385330b","sha256":"78a7e4ffe6aa075a26caaf2ac03f292b0cd33097d6b209ca9e9c8edc6d1591b5","sha512":"f5335db5a213a692b7942708116bdc77c6eb75baffcb0c40c51e8e0ac93bc7392ec8c5079fecdc145a4ac0e4bc0142d88d925cc5f968b434acd8332079ab7973","ssdeep":"768:Yr3W6B3m/gYSu8y/YeTrwOHN2F/Zu0obZtj213GqJXZQz4MhS/2ZTUb1Jsg4XnGu:gAPDT+Ft13TzIuBJsgh+y/GaRFGV/","tlshash":"a0a33c89a40a1fbf6cbd0894a95e590031780fd3598dcc93b3b96e893bfacd4635971c","first_seen":"2026-02-24T16:01:19.45383Z","last_seen":"2026-02-24T16:01:19.45383Z","times_seen":1,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getCoinList","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":1836,"timings":{"blocked":787,"dns":293,"connect":249,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-46505f61.css","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-46505f61.css HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-a01\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"421a777305f1afa9edf6f63fb2a8f4dd","sha1":"52b5e0f4f8a25109d5788207bde35b111d4a413f","sha256":"46505f61ad8cc779e83b14bea9807035175831a801d75e8660f0ea840a60a2df","sha512":"ce36f3dabd3c987b2a13e7b4c4397f0d80dd9b1cf77507b410a0c0363e205724273d2ec4f374972768e4412ec80f2a19bcf58b0a3570c646d6d111d2b21c37bf","ssdeep":"","tlshash":"1251315cfe9415314cbbe98faf585b8880007ee2e44a9dd4f54347260acf6933b2075a","first_seen":"2025-08-04T13:33:44.839567Z","last_seen":"2026-07-23T14:16:19.57221Z","times_seen":88,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-8ae3aedf.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-8ae3aedf.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-123d\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4669,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4662)","md5":"da89ffe4df3372418ba368e1e5589872","sha1":"6ea579194de5d9ff10a92cafd722d5e11f1140e6","sha256":"7c17a9e7318b9c01337ad35979f7b7a193ec52a6da94efbbe1f04c51f8627a27","sha512":"dcd7a85c074c094f54c7fc93e36bc2d93053a4a9f818586c6f22518a144adee1dff7ebc1a39c4c87d2a718eed84bcd470f964024c1d6871c64499f39e68e6812","ssdeep":"96:E/+vfp9YIqD+wSvxQMy2ob1ki5Rbt33hvzA3XvNth+j7:c+vf7YIqiwSy2obiKnhv0XFs7","tlshash":"f1a1b899f80285bae97714440848041121ac7bfab21588f1fbbead0a67b897dd754362","first_seen":"2026-02-24T16:01:19.457174Z","last_seen":"2026-02-24T16:01:19.457174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/currencyItem-33c14536.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/currencyItem-33c14536.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-453aa\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":283562,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65518), with no line terminators","md5":"377cf2a68809a52d685285dace1791a5","sha1":"fb4b2da6afd7299d01a1ea9da1bf3e35943f3669","sha256":"7984f028d9e430422c75a7f11447370a36049c20f82f4e34fdab62622d36eb2a","sha512":"ff212016e78655a5bf9ccc2b34636c0e4aa9987d75084d90a02965f21b7b9b266fe3ce7615e2a4c70f46efea1b27c0d0dc00c8bc83646e81583f9bdce2ec793f","ssdeep":"3072:E8YlaWh2/mFDWg65nxpMFh/lwFoFUynlNjS0LQQw4zUz1:qaT/eW9klTFUybEQw4zm","tlshash":"385438eae315313297af13d6a46b07069333659d1946841cbabcc8f7181988d32bff76","first_seen":"2026-02-24T16:01:19.458552Z","last_seen":"2026-02-24T16:01:19.458552Z","times_seen":1,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/ripple.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/01/ripple.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2274\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"ripple.png\"; filename*=utf-8''ripple.png\r\ncontent-md5: Z0sJmfYIMISipLHYsg87wQ==\r\ncontent-transfer-encoding: binary\r\netag: \"Fo0UpSboNgTjI3I7TSX4-AZvHt5w\"\r\nlast-modified: Tue, 01 Apr 2025 09:49:20 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: OvFpPJ9a0\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: ggAAAAC58BWUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-12T17:51:56.894159Z","times_seen":896,"resource_available":false,"data":null}},"time_used":1792,"timings":{"blocked":997,"dns":0,"connect":0,"send":0,"wait":795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/type/defi_activity_type","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-08-12T17:54:25.063231Z","times_seen":807,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.zetagl0bal.com/ws/676143bc-8eec-4165-b404-43f81d3aded5","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"GET /ws/676143bc-8eec-4165-b404-43f81d3aded5 HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.zetagl0bal.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: w9Alm543P0Lvk8VP9jsBRw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 24 Feb 2026 16:00:54 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://h5.zetagl0bal.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: XTcCj2+t//ZzkbeD5OMxDxrcypI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":2288,"timings":{"blocked":0,"dns":756,"connect":1013,"send":0,"wait":256,"receive":1,"ssl":1025},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-d253bac1.css","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\netag: \"68bc016c-3d\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-08-10T18:53:05.111589Z","times_seen":429,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/resource/svg/light/kefu2.svg?2.0.1757151594169","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /resource/svg/light/kefu2.svg?2.0.1757151594169 HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68956f9c-71f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1823,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13990f87070a4950c35e7cbb588d6172","sha1":"0b071f0130f017c1544e72369b9663827ccbaa73","sha256":"2d74fee33e0324321893d148d72b4d8ddaa08278307db9c305ca7c06ef8fb31e","sha512":"93b7b6ac7602dc7a83a40e3262035a5939f54609854dd34adbcf023619a6f6e51bc225cf393ebe74f8c6b5650b2b0dc44c623221fd7de13fa700da42f5ba0c9c","ssdeep":"","tlshash":"6d31938d735846d4f90c83e9edac6932eb0f22cbe0e0448dd801e95ccc126ad9c3f459","first_seen":"2025-08-04T13:33:44.840998Z","last_seen":"2026-05-27T00:23:28.918913Z","times_seen":9,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/21/fcb052bd042246edb2d05a2103c3cc1f.jpg?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/21/fcb052bd042246edb2d05a2103c3cc1f.jpg?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1623\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"fcb052bd042246edb2d05a2103c3cc1f.jpg\"; filename*=utf-8''fcb052bd042246edb2d05a2103c3cc1f.jpg\r\ncontent-md5: je8OQIv+O371fFkQH5PTlA==\r\ncontent-transfer-encoding: binary\r\netag: \"FhCeg9Sar4yyryolTsixqlrzsPI8\"\r\nlast-modified: Sat, 21 Jun 2025 11:15:27 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: puTKjG09N\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: PGsAAABmzg2UN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit colormap, non-interlaced","md5":"8def0e408bfe3b7ef57c59101f93d394","sha1":"109e83d49aaf8cb2af2a254ec8b1aa5af3b0f23c","sha256":"d694bcb2a501051a897538282582d91f5562a40a57a278b93135ecdff987da45","sha512":"b646fa4a66dcfcdd8afd2a6f86748a843d200719c4c10252df39fb53474bad45e3bfb6a7572d77e5821b4b3638b8004831c04683c8571a1208e7264c251291ed","ssdeep":"","tlshash":"eb3195c59e062d91d71229580a2ea498fa508c4b309cd8996f813b1fd1fe81bab56663","first_seen":"2026-02-24T16:01:19.463314Z","last_seen":"2026-05-13T13:08:03.096791Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3353,"timings":{"blocked":1036,"dns":240,"connect":265,"send":0,"wait":1213,"receive":64,"ssl":530},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/tron.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/01/tron.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 28273\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"tron.png\"; filename*=utf-8''tron.png\r\ncontent-md5: 1cpfkMekbLiOX1ey0wRrqA==\r\ncontent-transfer-encoding: binary\r\netag: \"FkpG-6nh9-BBlTlRnhk25gAvmbOo\"\r\nlast-modified: Tue, 01 Apr 2025 09:50:50 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: UPkbtdh75\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: JZoAAADY-BWUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-12T17:50:52.145171Z","times_seen":720,"resource_available":false,"data":null}},"time_used":2041,"timings":{"blocked":985,"dns":0,"connect":0,"send":0,"wait":1033,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/platform/dev/logo_144.png?2.0.1757151594169","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1757151594169 HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68956f9c-b5c\"\r\nexpires: Thu, 26 Mar 2026 16:00:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-08-10T18:53:05.16445Z","times_seen":297,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/10/637cb79653644cd39126506de946d9b4.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/10/637cb79653644cd39126506de946d9b4.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 14948\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 1647901\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"637cb79653644cd39126506de946d9b4.png\"; filename*=utf-8''637cb79653644cd39126506de946d9b4.png\r\ncontent-md5: 7Mchjf9dfdFk3d8cjKMK0A==\r\ncontent-transfer-encoding: binary\r\netag: \"FqOalQ9rou2JiaFw-_oY3cLepj0a\"\r\nlast-modified: Thu, 10 Apr 2025 07:34:03 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: JkHm8Kdyp\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: TpsAAABwlZ1WX5EY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"ecc7218dff5d7dd164dddf1c8ca30ad0","sha1":"a39a950f6ba2ed8989a170fbfa18ddc2dea63d1a","sha256":"4bae2491eb6bfad9df4876012f4be1fa8f3ac2b8238d4c085bb2c1804303d823","sha512":"b54523b551787ae65a7ed3f76a9b0f6169e913ed2f34fff7184a2165af774e5476190dbd3e0b963117070b3abe9d6aefa72d3eda21d4430b32627503bdf4e5f8","ssdeep":"384:kGnNGIBEM/uaDyIhKgkDEGcT0hhHaRDESG:kuNpS6QE5mdaRYL","tlshash":"2762cf16267d052ebbda017c81a8cd5f3074bdbc3a61eb4699fda968cf05900cb958cf","first_seen":"2025-08-04T13:33:44.88525Z","last_seen":"2026-02-24T16:07:54.278662Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2375,"timings":{"blocked":1020,"dns":247,"connect":256,"send":0,"wait":331,"receive":1,"ssl":517},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2026/02/05/8effdfcee73246f9af498dee03dc1788.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2026/02/05/8effdfcee73246f9af498dee03dc1788.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1268\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 1565120\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"8effdfcee73246f9af498dee03dc1788.png\"; filename*=utf-8''8effdfcee73246f9af498dee03dc1788.png\r\ncontent-md5: v9HWBSylKRwHpoATH2y10w==\r\ncontent-transfer-encoding: binary\r\netag: \"FuFAEFCwy9m09E5lS2IzgpNOJS11\"\r\nlast-modified: Thu, 05 Feb 2026 14:57:24 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: 5Q6unRYxd\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: yF8AAAAHhr-gqpEY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 44, 8-bit colormap, non-interlaced","md5":"bfd1d6052ca5291c07a680131f6cb5d3","sha1":"e1401050b0cbd9b4f44e654b623382934e252d75","sha256":"21e3c73a3422b3fa779e13ba2221c28e57deb9485834c1344fdbea93b6b8f1be","sha512":"955557aa785b47669b97729a0325c85b1ecb675b18aa76c3ca9e187f789d1b155bcc01d7b66ae7b900a4299cea369ba8e8e3d9a828ee7aad05462d046a462a72","ssdeep":"","tlshash":"6221874efb001801a8e5f99118e9341565764d409af5f871f4eef80209f04fa41595eb","first_seen":"2026-02-24T16:01:19.468873Z","last_seen":"2026-02-24T16:01:19.468873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1654,"timings":{"blocked":1012,"dns":0,"connect":0,"send":0,"wait":642,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-ef6d76bc.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-ef6d76bc.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\netag: \"68bc016c-308\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"ce925c7aeb1905c0f357c6a4acb88cd8","sha1":"7cacc2ed99c9d5a5641965952cc7bcdc1dae9d10","sha256":"be0df7ceef3b04bd394faf550692e1e133ae0ec091f50bc4ccff17a70f8706e5","sha512":"b3d5e8ffcbb8084b2e27e969c778306ca012548c232c7780f754987f9edd65f90d8ed8c66c6c799600c19df8dd5c1efde7ef4c54ef341c76fc3d82c656567906","ssdeep":"","tlshash":"bd01fdf8fc0ccebb0ea20a5001903600140a1fddfa1419e198867d6a1be4940d7ce72d","first_seen":"2026-02-24T16:01:19.440543Z","last_seen":"2026-02-24T16:01:19.440543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/18/838df23361234e1186e31d73bd58f37a.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/18/838df23361234e1186e31d73bd58f37a.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 13411\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"838df23361234e1186e31d73bd58f37a.png\"; filename*=utf-8''838df23361234e1186e31d73bd58f37a.png\r\ncontent-md5: T2ZwM4H4kHwGK6aIpILkmA==\r\ncontent-transfer-encoding: binary\r\netag: \"FtngJPUEqdeJTlYHlVLPmBZNDL6_\"\r\nlast-modified: Wed, 18 Jun 2025 03:24:03 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: BqE6KAGdd\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: n2oAAADf9RWUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"4f66703381f8907c062ba688a482e498","sha1":"d9e024f504a9d7894e56079552cf98164d0cbebf","sha256":"ce65303cc2f0a2d80774cd0c704f47d0d90f54013a4628ead468ad10ccdf9d79","sha512":"d1539b247a7ac3c9d228f424f4e8b018bffbbef4280cb454f7d526fbfd9417918128070d8722b6225b1a57456df587d0eed8ed4987b27d530b5817752f7d46a9","ssdeep":"384:d6Jn2JW3F3h7EKPqYJg0CVmyBhxp6j1tyOk22/V9x+xOHD+:YJvNClLBzIXUUxOq","tlshash":"2e52af85fd26eea1b3a8cd066ce95243773703c48690b441fcce2913666207acd7e99a","first_seen":"2025-12-21T16:32:24.692969Z","last_seen":"2026-06-29T18:42:46.459432Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1695,"timings":{"blocked":987,"dns":0,"connect":0,"send":0,"wait":707,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-bc011be9.css","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\netag: \"68bc016c-18d\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-13T04:40:10.646319Z","times_seen":1473,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/en-6af94b74.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/en-6af94b74.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-9e84\"\r\nexpires: Wed, 25 Feb 2026 04:00:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40580,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (40557)","md5":"9a5d04804402a487bf67716740224731","sha1":"d8547ffc67558c748ccc36889ef0be6c7c38db19","sha256":"6f99556d7693ccfeb2c4a243351d15436a58d5920be7b3e7e5071a344853efc9","sha512":"e900758757a53c4fe214cae65e0c84289d6edc69eb8ec33807dc50b2ae38502d7222d35e58d54585deae224b939630e953ec87bea5423157f482ad8958ff106c","ssdeep":"768:+GtZcEw/o7rKOd1FsifQAMCUrAaAMDVoP6+6sPG9w1mwO6fpk7aOLxO:iponKOdTbXUrdDVLsPWwqLxO","tlshash":"b503d6893e1a989a04f3537674ce6e1160f60ac18255881f4fedc9fd93d2b67a363b34","first_seen":"2026-02-24T16:01:19.473131Z","last_seen":"2026-02-24T16:01:19.473131Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/resource/svg/light/fenxiang.svg?2.0.1757151594169","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /resource/svg/light/fenxiang.svg?2.0.1757151594169 HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68956f9c-793\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37826f862b3efa4a499553354a755edb","sha1":"e349f123e25dd6a1bb14c94dcab67f16f85c321b","sha256":"191c9b8b0f51fa6fd3bc19c4ef5de194534de7f261bfc5034f1ac2ec4cc96536","sha512":"881bb56f5de875629ddfdcbbdb0089edcf8a8ee2b1c9cd1ba3dcf0df7b89b6a596ee2b476308acc45e874281ae13bdaddd4559bf1d8ff0940ae641add86d8dea","ssdeep":"","tlshash":"b5416494f3d8f8b87d4983c5852668b4391911f73922d23da4f0b349f5c6eae685cd41","first_seen":"2025-08-04T13:33:44.87253Z","last_seen":"2026-02-24T16:01:19.475443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/a2fc48dbce7d4d9990336f74c567c94b.jpg?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/a2fc48dbce7d4d9990336f74c567c94b.jpg?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1375\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"a2fc48dbce7d4d9990336f74c567c94b.jpg\"; filename*=utf-8''a2fc48dbce7d4d9990336f74c567c94b.jpg\r\ncontent-md5: fB1fCjCGPW0DEn9+ZV5DVg==\r\ncontent-transfer-encoding: binary\r\netag: \"FmujjGD2VVJy-6_7hd1GSRGX5p3Y\"\r\nlast-modified: Fri, 20 Jun 2025 06:17:21 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: Slpzgz6qo\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: z0AAAACBvg2UN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 44, 8-bit colormap, non-interlaced","md5":"7c1d5f0a30863d6d03127f7e655e4356","sha1":"6ba38c60f6555272fbaffb85dd46491197e69dd8","sha256":"76150e70b9db586f3ac9b1f1b40918da605bc3b7d356c1683b4c1710b6ee0c97","sha512":"752eed191b66df729311a7c4a8f7422a46b2dc32c233c7d41f052b857ac4d1b9ec9be5276fc9b8249297d14e9c15a58cde9ae37275fae847f8efd81b7026ed23","ssdeep":"","tlshash":"622163d123953d2781003e1d8909dae1d8009c3b7a75a0139b423f0d87f870ff3565b0","first_seen":"2025-12-21T16:32:24.701365Z","last_seen":"2026-05-13T13:08:03.036492Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3803,"timings":{"blocked":1388,"dns":251,"connect":251,"send":0,"wait":1011,"receive":14,"ssl":883},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/ethereum.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/01/ethereum.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 9807\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"ethereum.png\"; filename*=utf-8''ethereum.png\r\ncontent-md5: EtlyJGF1nO//AtkHaj0nGA==\r\ncontent-transfer-encoding: binary\r\netag: \"Fmt2P-oLFyV6NrkMRlWT4WKa7gVk\"\r\nlast-modified: Tue, 01 Apr 2025 09:45:10 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: kCqNCc3aL\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: 7DIAAADG4g2UN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-12T17:51:56.893527Z","times_seen":834,"resource_available":false,"data":null}},"time_used":1781,"timings":{"blocked":997,"dns":0,"connect":0,"send":0,"wait":783,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/charting_library/charting_library.min.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:51.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68956f9c-2a6b\"\r\nexpires: Wed, 25 Feb 2026 04:00:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-13T04:40:10.635021Z","times_seen":1317,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/resource/fonts/Arial.ttf","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.zetagl0bal.com/assets/index-b77481e5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\netag: \"68956f9c-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-08-13T04:40:10.667152Z","times_seen":2224,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/vendor-3e6db715.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/vendor-3e6db715.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-d97dd\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":890845,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70a36d2c7a3ec7f1e2b24c8f277c2c9","sha1":"d51a46053a126b38fb9e12cbc9cf5f130e901e59","sha256":"30964ffaaec8ca2b548d2a75a8ad0a52c1233e44ca833df72b48be81390b2dba","sha512":"c1bc6eae947fe6c700ce67f7dfe829f8ea004574a0614a98c93286da12b7d6c08e418d84984ee5ff28801e3b23c9714a55cc13c0fed514d080f6314a7c0fcb7f","ssdeep":"12288:Fry0h5NhF+Dif1J4FbBVbHkB7/suxzFS74NbTU+3WhNWualV/+YPYNj:Fe0fNhF91KNBBkVxzFShphNWual7w5","tlshash":"29153ac57292f06147ab20e240bb0006f3396e59744e84a8f16dd9db7d69d89e2b7f3c","first_seen":"2026-02-24T16:01:19.438491Z","last_seen":"2026-02-24T16:01:19.438491Z","times_seen":1,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/currencyItem-b3860070.css","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/currencyItem-b3860070.css HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-81d\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2076)","md5":"aeaddef4b627c95ee855a5bb7bfd7d2e","sha1":"d0b509daa6b5c32a909a298b99ee51d6c295ef5b","sha256":"b3860070846923b66ae46a8d41d708f37cfb85d18ab42ac55958cbac0f210b57","sha512":"6d3dd263f318817e5a691e60929d8c0f84f22b687b7a5f510f34da8c0fa038174200bfb21649520eb420c1811a8d7b253dc57d1fcdbffc2710c0f14d4ec4be1f","ssdeep":"","tlshash":"9541ef54535703b8e93bd4977ee8014cd0293f82a047a6dbe84b59335cdb7a30a70d3a","first_seen":"2026-02-24T16:01:19.482448Z","last_seen":"2026-02-24T16:01:19.482448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-939dcf6d.css","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-939dcf6d.css HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-289e\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10398,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10397)","md5":"1dd956651e8bfda2ba56c4d3e75cda03","sha1":"5554265281d7adfd1c6f23a2ec7e2ae38927bddd","sha256":"939dcf6db84e64f5f1c2900682b0cae545e92225829b69f01e28633322f08b8b","sha512":"c019f07dea8ed694eb23429e84ea1b6db24580dcb39ab9b449bc93f109b21e1cf0276020a9253315dc7edce46cc82d4e371b06b301dafc816b18ee0c4abe79f4","ssdeep":"96:QyX7Pu6PkLGj0pGvRezOETjHa5OM8OOs+ENY9l2reg99YUIQ8CJwtDldXIg6Q4rx:QGLuK15vRePfHN8qahVwL+ztp","tlshash":"6f22661abb643734ec37d186bfac4a8cb010ff22e6879dd5d55746220dcb9e72a2804c","first_seen":"2025-08-04T13:33:44.877539Z","last_seen":"2026-02-24T16:01:19.484308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:51.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rangwodf.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:00:44 GMT","end":"Fri, 24 Apr 2026 10:59:07 GMT"},"fingerprint":{"sha1":"A7:D7:98:60:01:FB:A2:7D:68:92:7C:66:27:0F:6E:9F:EF:58:EE:0D","sha256":"30:5B:B5:CD:C6:1D:DC:50:AB:B2:5C:F7:80:BB:2E:B0:F2:8C:5D:36:95:24:63:FC:BF:96:EE:7B:E0:58:33:CC"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: hw.rangwodf.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 16:00:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Jan 2026 15:40:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNaHezNul%2F7IaiWKTH5QmiPtERwinvW%2F0eetryYoKE%2BXaMLnNuvJC5ousOJyKj7cjznp3xdqGM5rWCaqBakGhW3zrWnjgr2y%2B4TqsNMO\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"695bdb5c-110e\"\r\ncontent-encoding: br\r\ncf-ray: 9d302d9fcf3d4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":55,"dns":26,"connect":8,"send":0,"wait":482,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/05/13/10a1069c6b564428ab30f0d4683edeb9.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/05/13/10a1069c6b564428ab30f0d4683edeb9.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 8744\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 4851096\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"10a1069c6b564428ab30f0d4683edeb9.png\"; filename*=utf-8''10a1069c6b564428ab30f0d4683edeb9.png\r\ncontent-md5: lr1O66m1LgQ7qBnZosb/3g==\r\ncontent-transfer-encoding: binary\r\netag: \"FrmWR38NhlicvdCk3Uf6ttgGetmi\"\r\nlast-modified: Tue, 13 May 2025 06:12:04 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: eHCNOWpz0\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: _pYAAACtYssM_oUY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 331 x 256, 8-bit/color RGBA, non-interlaced","md5":"96bd4eeba9b52e043ba819d9a2c6ffde","sha1":"b996477f0d86589cbdd0a4dd47fab6d8067ad9a2","sha256":"0cea0591e79b15854afc18656ef2a4319c849b279807f99711816a923a6156c9","sha512":"3a92b92cf3b803a56b570c345e1a6b2c4cbdba6b1c71aa4754ebd3ed999aacfa7e19582ece9d17b87d689d6fbf58e3b1e3f39cd6ab2e8cd02f7997c26841ab93","ssdeep":"192:oIPgEdAeiXe+YYYnJYVdRdCalMJMJi6oC/X+LhIVZbkI82IHcKw:oIPgEixQJADCGUMJ5xVZtKw","tlshash":"b8027e83b314a029de4a7f6c7993fb09e7eb4640dc66ad24a0ddd19c3cc19558b43589","first_seen":"2026-02-24T16:01:19.488185Z","last_seen":"2026-02-24T16:01:19.488185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3794,"timings":{"blocked":1377,"dns":241,"connect":264,"send":0,"wait":1010,"receive":27,"ssl":872},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/11/16/5bb9fde744454929ab8d93c467e49f45.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/11/16/5bb9fde744454929ab8d93c467e49f45.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 775156\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 8638665\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"5bb9fde744454929ab8d93c467e49f45.png\"; filename*=utf-8''5bb9fde744454929ab8d93c467e49f45.png\r\ncontent-md5: 7SR8LJRRVSDtiZomLnm18w==\r\ncontent-transfer-encoding: binary\r\netag: \"Fh_ErUcohnOpVOT9cQsanYP3Ncy1\"\r\nlast-modified: Sun, 16 Nov 2025 14:20:43 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3:22\r\nx-m-reqid: E2hypREyM\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: 5KkAAADrX6NGiXgY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":775156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1100 x 1100, 8-bit/color RGBA, non-interlaced","md5":"ed247c2c94515520ed899a262e79b5f3","sha1":"1fc4ad47288673a954e4fd710b1a9d83f735ccb5","sha256":"aadc7850f30a1f8a2e7d0b2d6983221fdf2b2e92dfe1dc63679f921ac910a8c2","sha512":"51444456dd897707acf6eca616cf8a3bb4dd7b9a357c35dcc8bf8d53e575c12a655be9af3fcd031b51262732d45304b0c8385c931c1ba169c23dd1495fc9dcee","ssdeep":"12288:NIhxpYyJ5A/oka8idQ3qiR33AHA/ww5PDod3S0NnjzHO+xJhIuBWD2i7PIhRJXyy:WhzYyA/Q8b3qy33swBi37H3Jahyi8Roy","tlshash":"1ff4238ccc78c9610afa682359a25b4a036bb166646204d7c3e9360dc61befd17f4d7f","first_seen":"2026-02-24T16:01:19.490197Z","last_seen":"2026-02-24T16:01:19.490197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2781,"timings":{"blocked":972,"dns":0,"connect":0,"send":0,"wait":1235,"receive":574,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/resource/fonts/DINOT-Medium.otf","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.zetagl0bal.com/assets/index-b77481e5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\netag: \"68956f9c-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-08-13T04:40:10.636189Z","times_seen":1759,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/vendor-72ef657d.css","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:51.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-16997\"\r\nexpires: Wed, 25 Feb 2026 04:00:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-13T04:40:10.640131Z","times_seen":357,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-6e382038.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-6e382038.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\netag: \"68bc016c-1fe\"\r\nexpires: Wed, 25 Feb 2026 04:00:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"48ac7477e476a780faba92e61e09288f","sha1":"999daa9fecdc31bdd437007705147abe9f926695","sha256":"34140295b38161d8d2aa0396f4a45dd107f06848fa5a21200aace5cf5163b074","sha512":"d8b51a563e44d6113b97cf4342c1e52b3fef1424750e48fabdbf2f175af7a24053e6703f218f67cf8b78673f9c5212a3f406ab6e9ca58570f2817d8b432243d3","ssdeep":"","tlshash":"90f0057fbd6680b11bb348fca1631820b9281f072754c4d4d4871e14c774ce7e51e614","first_seen":"2026-02-24T16:01:19.494292Z","last_seen":"2026-02-24T16:01:19.494292Z","times_seen":1,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getMt5Amount?coin=xau","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getMt5Amount?coin=xag","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/1bb4687be35841d29e5748305b328554.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/1bb4687be35841d29e5748305b328554.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 31296\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"1bb4687be35841d29e5748305b328554.png\"; filename*=utf-8''1bb4687be35841d29e5748305b328554.png\r\ncontent-md5: MO/Y3CrCT050JR1CNMNetQ==\r\ncontent-transfer-encoding: binary\r\netag: \"FjNa9McEUaIKoNLmHk_Ucr2Jm1Vw\"\r\nlast-modified: Fri, 20 Jun 2025 06:33:56 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: pZvd8pwVM\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: L5wAAABOIRaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":31296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"30efd8dc2ac24f4e74251d4234c35eb5","sha1":"335af4c70451a20aa0d2e61e4fd472bd899b5570","sha256":"d7eb74eadb030e8deaf806fd9cce6e8c9a38b6c8d5e9cb314f417a86ba7bd246","sha512":"1bebbbd98fdbfd2cc22f8e4412d118d9dc5e825312cc7084348bba8aa05575391fd9ed684f24f98f74d5a20b2e744188f0f76706c375dd4cb664d5e3f0721643","ssdeep":"768:wZokCqm4zQJvrqVFqF1SssyQgA5IL3PmIUOrV7V6h:Xk8hiTVIL3PmIUOrVMh","tlshash":"6fe2e1d9439af6baf0799406d876b99df3709c7a8040ee25853cdacddb352800f1f409","first_seen":"2025-12-21T16:32:24.689217Z","last_seen":"2026-05-27T00:23:28.91623Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2123,"timings":{"blocked":965,"dns":0,"connect":0,"send":0,"wait":1133,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getAllSetting","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-6e382038.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-6e382038.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\netag: \"68bc016c-1fe\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"48ac7477e476a780faba92e61e09288f","sha1":"999daa9fecdc31bdd437007705147abe9f926695","sha256":"34140295b38161d8d2aa0396f4a45dd107f06848fa5a21200aace5cf5163b074","sha512":"d8b51a563e44d6113b97cf4342c1e52b3fef1424750e48fabdbf2f175af7a24053e6703f218f67cf8b78673f9c5212a3f406ab6e9ca58570f2817d8b432243d3","ssdeep":"","tlshash":"90f0057fbd6680b11bb348fca1631820b9281f072754c4d4d4871e14c774ce7e51e614","first_seen":"2026-02-24T16:01:19.494292Z","last_seen":"2026-02-24T16:01:19.494292Z","times_seen":1,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/filters-262d5627.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/filters-262d5627.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-c1e\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"f5ba5102c897ddb3fa50df664e217c78","sha1":"5a1a9ce80e63802c5bd3c7291a1d63649239f589","sha256":"affb835c3d65970857218c3b14ebbbd6eff42a3da31981157ed1a451621e6110","sha512":"6f4c41ffc70d3b1ce590d8a748cc30e43e8e0ae32b75f5dcd248dc4f8cb6d8ac67390b589c0f3e33da346946574eb6f2ce8fac464953c4602078b78519dddaed","ssdeep":"","tlshash":"b55113fdfcd7a13356ea6ef940288454728eae20686e0a4df54bd0455973888e07f768","first_seen":"2026-02-24T16:01:19.49778Z","last_seen":"2026-02-24T16:01:19.49778Z","times_seen":1,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/platform/dev/favicon.ico?2.0.1757151594169","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1757151594169 HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 458870\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\netag: \"68956f9c-70076\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458870,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 10 icons, 256x256, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"c9b19288724cff2b153eee0e59668b7a","sha1":"68c3be372a3d1cf4ed92638cd056096126386cc8","sha256":"3c0e28043de6b313e46169d72af1bd23425bb43b33a8280f57e2e89a50728f73","sha512":"8b351a912c2a7e35b74a78478f1d6bb602603bb38d2164b72144c8aaac9225505fea1d7ae685d342acb3d4bf541ae56cff810f33cebbb52f5c5d5ae16d1ac3fa","ssdeep":"1536:K7spS5u3LqjyY9guqxz6GsgxTZWXdbIF15vNKRyLHSHLkT6C0kaZgjTV/:7btjxzVPl+CrV/","tlshash":"81a4fcd2b8c2d559ec292f34a835cdea002bbea5bc75f94a7d84739f57732c29021523","first_seen":"2026-02-24T16:01:19.499299Z","last_seen":"2026-06-29T18:42:46.512648Z","times_seen":4,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getMt5Amount?coin=xau","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getMt5Amount?coin=xag","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"95394eef4a44736b06f023e0ac9d958a","sha1":"9235ebdb629720c169608b768f68aef3f8132002","sha256":"c3f97f6fc8ba5ed030e6fd9f244e51352a8e337ec71f19353fda47a2a0b4f73f","sha512":"14b5663473e4c8012e7f5da97a5e4b5c516d4a8dabe03a019340d6aa400e2812a4a23936f44f33f631e2776755984ae11d2a2ec8de8bff2a11658b4c5d6df10e","ssdeep":"","tlshash":"8e9002551c1c8242e88300a59606520500283160262c92485c59912580891662040c58","first_seen":"2026-02-24T16:01:19.501001Z","last_seen":"2026-02-24T16:01:19.501001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/resource/svg/light/user.svg?2.0.1757151594169","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1757151594169 HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\netag: \"68956f9c-227\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-08-10T18:53:05.099365Z","times_seen":411,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/3aa666d0ada040f5a4e2d4343a025917.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/3aa666d0ada040f5a4e2d4343a025917.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1730\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"3aa666d0ada040f5a4e2d4343a025917.png\"; filename*=utf-8''3aa666d0ada040f5a4e2d4343a025917.png\r\ncontent-md5: +jDlovhNjHSIKxZFe26CNw==\r\ncontent-transfer-encoding: binary\r\netag: \"FqbwlNPd_Wkbr-9CivN2bH-p5561\"\r\nlast-modified: Fri, 20 Jun 2025 06:20:54 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: VrNr0arnR\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: XDEAAADo2w2UN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1730,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit colormap, non-interlaced","md5":"fa30e5a2f84d8c74882b16457b6e8237","sha1":"a6f094d3ddfd691bafef428af3766c7fa9e79eb5","sha256":"eaa50c2a5714e5d90868dd46b6831be7678360c3640683317bfd877c41a4080d","sha512":"516e05b90a2f9ba8ae84f5297e03b1b1cc22c3f05ebf4ae2855b831330c96b5fdef6a804bb663fa9315a731c46a4da884b30847129eb0f1bde588369d22cb649","ssdeep":"","tlshash":"6b3176c487517deac2424f7c9b99803178421ca3717e44472f05bf1d66fe683f350a52","first_seen":"2025-12-21T16:32:24.684313Z","last_seen":"2026-05-13T13:08:03.134723Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3351,"timings":{"blocked":1028,"dns":246,"connect":259,"send":0,"wait":1227,"receive":65,"ssl":523},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/05/26/8cecfc0dbd5943268c1a60d741af7afb.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/05/26/8cecfc0dbd5943268c1a60d741af7afb.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 6153\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"8cecfc0dbd5943268c1a60d741af7afb.png\"; filename*=utf-8''8cecfc0dbd5943268c1a60d741af7afb.png\r\ncontent-md5: 0lixLoz33AOOzA8VzoCe0w==\r\ncontent-transfer-encoding: binary\r\netag: \"FsQDFfraFvJnWmZB1Bv8cOZybvnG\"\r\nlast-modified: Sun, 25 May 2025 17:25:37 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: ufbwLlkg1\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: B1AAAAADBRaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, non-interlaced","md5":"d258b12e8cf7dc038ecc0f15ce809ed3","sha1":"c40315fada16f2675a6641d41bfc70e6726ef9c6","sha256":"a62836fd9d77f38c180d4c233af4e2a8abafda4d089fa76da25067fbf167bb5a","sha512":"fd3869da65795a1a3f52263bebb57982d7f6acc0cf5e12945a15c6729fc9fc81d0928b502204d66f1a368e85959304e5eeaef81f7a77914c8598f72f8bacf709","ssdeep":"192:rHe3og7qnVmc34vcEKXCWaIdq4JU8ARGqlpLkK:r+3pw4v1CsIIcJgZrL3","tlshash":"06c1b0f3d694660792ced450b01adb2c96cbd4bd93a05291ad3aa08335f62dcbc0ba01","first_seen":"2025-12-21T16:32:24.668246Z","last_seen":"2026-06-29T18:42:46.508322Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2046,"timings":{"blocked":979,"dns":0,"connect":0,"send":0,"wait":1067,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/platform/dev/config.js?1771948852505","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /platform/dev/config.js?1771948852505 HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 166\r\nlast-modified: Fri, 08 Aug 2025 03:31:40 GMT\r\netag: \"68956f9c-a6\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"e576f20ffc3ddc9fe92ef7c388869315","sha1":"67e798a79a81fe3672c3a6e52fb73f026b49ef12","sha256":"f9a5dbbbadf3e57e4e8d292e18fbb7c6d9b588ada4973cce1baf330cc41a2422","sha512":"9fd5adc74568933197e508158a8a316b30c077704aca8a3678d54fb8044258db1864d7a76b0bc804359cdf0ca9bd4beae54b0b5656654c52a1d911c24131802d","ssdeep":"","tlshash":"84c04ce625759b092d70473a9acc5e31f4424333c85d421fb8bc5c002f7340415a8c71","first_seen":"2024-12-02T08:41:53.512891Z","last_seen":"2026-07-29T22:52:22.735011Z","times_seen":35,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getAllSetting","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13707,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"10452a2df47e2ad663439bb3a90011e0","sha1":"bcb9e9d7c3aa801d1ffba500328e1341821ffcc0","sha256":"d8210270c63b9ee6793afbc347434222256335ae4d1ac8745497677723984acc","sha512":"8344183c887c504bc603e53968dc098d4b00ab3df6226425441a1f5fef2c20d90bb755482cbc7853beff5c02208516b1c5b3b2f2b013503c900e38354988b44a","ssdeep":"192:Nytj3twnOSpQ+s5D+RbSc2hN5iKH9FQZ92i9WpNFdM1WSKi/X55Wq6jkre4lXZby:sqi79qd1miRrvWyWAm2C7","tlshash":"a852649e31dc9cbea6df16c290ef2655b4ec1857d89cad15f0ebef4cd8925b8040b049","first_seen":"2026-02-24T16:01:19.446725Z","last_seen":"2026-02-24T16:01:19.446725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getMt5Amount?coin=xau","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a89ab88bbbcc93e780438260894872e4","sha1":"0c3bb131a86dcf529f0cb09c5c580c6b89dcb43b","sha256":"7c2198a4e9ce36fbf9bacb755355391046a9beb216b59a2fac572d5e939c07f6","sha512":"57108c9bed653d17ba126549560b2cf8b5db33bb65feb7a63dc70213f3e5f8d46c9f2a18bcf6af292e13c15455927cd1efde74dbf04eb5e9b92cb34acb4176ee","ssdeep":"","tlshash":"da9002551d188242a88340b5954663040424316026249348cc59612681c81762040c58","first_seen":"2026-02-24T16:01:19.506685Z","last_seen":"2026-02-24T16:01:19.506685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getMt5Amount?coin=xau","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ec222f938fe3d8440933854300e5a9a","sha1":"386560f4b2709db5a4303c8a7a0d9049fb5020d9","sha256":"c41ba57113e5b0b6b2a1ba08807018ddb96fbfa97dc4330e019daf85603de806","sha512":"b4986492fbdea10692e1456285d4a2e836ea9b99f0fb8f14cf611a94466536b31647c46756a1d46509ae8a6576fc2d68654e7ca236b612545a90b21828645ea6","ssdeep":"","tlshash":"e89002951c188242ac8300a59556960400743160762492484c59512580c81762540c58","first_seen":"2026-02-24T16:01:19.507928Z","last_seen":"2026-02-24T16:01:19.507928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/21/2e7fcebeb98b493b92b5d02008aef6b0.jpg?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/21/2e7fcebeb98b493b92b5d02008aef6b0.jpg?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1300\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"2e7fcebeb98b493b92b5d02008aef6b0.jpg\"; filename*=utf-8''2e7fcebeb98b493b92b5d02008aef6b0.jpg\r\ncontent-md5: RY/sU3UPx0PHP7YvV2XuVQ==\r\ncontent-transfer-encoding: binary\r\netag: \"Fv1RlhMQwZauhz5T7-fltwqKTldq\"\r\nlast-modified: Sat, 21 Jun 2025 11:12:35 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: 9zkaie2zb\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: 4KUAAADU0g2UN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit colormap, non-interlaced","md5":"458fec53750fc743c73fb62f5765ee55","sha1":"fd51961310c196ae873e53efe7e5b70a8a4e576a","sha256":"7bec99778348d2a2f9008e32e627e55d3be934c82d02d7cac9162724adbdd3b5","sha512":"ff2735cc74ec93c491a291663389ae8cedf6694b8e1bbc261a3ba86e0786a4eb7e392db060c51106995c11198df47e837d080e436aeda3b60c1a46c090b1f2f0","ssdeep":"","tlshash":"13212edd0f81b5a3d4513eae801995e028924d277cba588b5f86ff2dd1f6183e229099","first_seen":"2026-02-24T16:01:19.509339Z","last_seen":"2026-02-24T16:01:19.509339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3786,"timings":{"blocked":1379,"dns":243,"connect":262,"send":0,"wait":1011,"receive":14,"ssl":874},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/a8d168fd00704751be16073525127231.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/a8d168fd00704751be16073525127231.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 20559\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"a8d168fd00704751be16073525127231.png\"; filename*=utf-8''a8d168fd00704751be16073525127231.png\r\ncontent-md5: eQZAxWUudnQGM49bwxjq5w==\r\ncontent-transfer-encoding: binary\r\netag: \"FuZ1AJLn2b8VVH_0LlAODLn8B3F9\"\r\nlast-modified: Fri, 20 Jun 2025 06:47:41 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: a3e1Pk68B\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: wYMAAABWJxaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":20559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"790640c5652e767406338f5bc318eae7","sha1":"e6750092e7d9bf15547ff42e500e0cb9fc07717d","sha256":"257328d65db62be254021461b0c8d30bac50c12b003e643a570c9d05215c18e4","sha512":"904261912aa02de81c1416ac8acc3c7de4cc996da65b6db989525af1d1a9f1b8ad77381433665b14641cdaf599d598e6c3afb535f66a7b3732fd44b4f717690c","ssdeep":"384:QcwOhzZrntoIoiHJbC/PTVDlgnRCJJ5Xo6vYGl7KxE4H4JFfYlPqkewv0d0:Qc7FWcHJbC/PT7Z6YdOEi4JFfY5qkewh","tlshash":"b392d01ed4b39a7720f36521cb59a318ac537c9f9e9f028c8c6a989e7f4724448d122b","first_seen":"2025-12-21T16:32:24.679294Z","last_seen":"2026-05-27T00:23:28.910496Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2313,"timings":{"blocked":959,"dns":0,"connect":0,"send":0,"wait":1233,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/21/1d32351ad5b243349cab9872756aee2f.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/21/1d32351ad5b243349cab9872756aee2f.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 42983\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"1d32351ad5b243349cab9872756aee2f.png\"; filename*=utf-8''1d32351ad5b243349cab9872756aee2f.png\r\ncontent-md5: cnnaGKR7FXaH4ipH7gPIUA==\r\ncontent-transfer-encoding: binary\r\netag: \"FpECQgP8zaxf3wRSvxReNEvjkdCm\"\r\nlast-modified: Sat, 21 Jun 2025 03:17:54 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: 7Ea2stUCm\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: JfgAAACn8haUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"7279da18a47b157687e22a47ee03c850","sha1":"91024203fccdac5fdf0452bf145e344be391d0a6","sha256":"2e53e1375e44ee93ae37d4769e5d0a86ec5b07c5cf17cfb786fb063e530c1a83","sha512":"9d9db0478c7327c74bdfe70f96eb2b6a67ce2e9735f4245aaba631387f9c6e084f8183c9300517bd66803dbffff0b2e1c6fd2a41cf1af12c9915147b3fbb9a97","ssdeep":"768:Mo//ZsryVaf6FLTc0ol2BEnr/qM/+2TWrkv1hBQbkANlD0SOhJi0zmBZSNVh:H/akvBErS/2Tb1IbkANlDkhJiZLsVh","tlshash":"9e13f18ba42a054a85d2b37fb0cb593ad05dc5d2c7ac187c8be11ffa51182e76c54e33","first_seen":"2025-12-30T00:29:18.47403Z","last_seen":"2026-05-27T00:23:28.926793Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2382,"timings":{"blocked":953,"dns":0,"connect":0,"send":0,"wait":1232,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/6d6dc532c1ae4681b28671ba0e691615.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/6d6dc532c1ae4681b28671ba0e691615.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 27173\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"6d6dc532c1ae4681b28671ba0e691615.png\"; filename*=utf-8''6d6dc532c1ae4681b28671ba0e691615.png\r\ncontent-md5: WlKTi4p4MRjjnymA9dTbUA==\r\ncontent-transfer-encoding: binary\r\netag: \"Fg3FhQ095PDm6wXQNzyCtCyN0NS8\"\r\nlast-modified: Fri, 20 Jun 2025 06:38:13 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: gGVO2m7H6\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: He0AAADzKxaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":27173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"5a52938b8a783118e39f2980f5d4db50","sha1":"0dc5850d3de4f0e6eb05d0373c82b42c8dd0d4bc","sha256":"11313d6522c4378d1b68d8755c5dec2f1ad6d8198f33a3f5792765513a1e7e43","sha512":"11f9850d2be4b86dcf69aba4216b40faca040c483ed6774f82e6220862d08468e5aa313c4f7f911249ef7f6fc60bdd9b8a5b59ca906fefdb34af4ac6769aeb55","ssdeep":"768:MHwAvIIg1ssIjD5Xl25aqbjCnfnD6audBeupM5ly5ELPXp:WwADg1sv9V2nbj676aOB3p685Ebp","tlshash":"f2c2e1d23924afa08ed9c6c5650080cbc6e47e89dbb92d1150f6cebef28fc14a072d56","first_seen":"2025-12-21T16:32:24.703122Z","last_seen":"2026-05-27T00:23:28.904135Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2225,"timings":{"blocked":949,"dns":0,"connect":0,"send":0,"wait":1232,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/getAllSetting","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":1829,"timings":{"blocked":790,"dns":287,"connect":246,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-8ae3aedf.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-8ae3aedf.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-123d\"\r\nexpires: Wed, 25 Feb 2026 04:00:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4669,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4662)","md5":"da89ffe4df3372418ba368e1e5589872","sha1":"6ea579194de5d9ff10a92cafd722d5e11f1140e6","sha256":"7c17a9e7318b9c01337ad35979f7b7a193ec52a6da94efbbe1f04c51f8627a27","sha512":"dcd7a85c074c094f54c7fc93e36bc2d93053a4a9f818586c6f22518a144adee1dff7ebc1a39c4c87d2a718eed84bcd470f964024c1d6871c64499f39e68e6812","ssdeep":"96:E/+vfp9YIqD+wSvxQMy2ob1ki5Rbt33hvzA3XvNth+j7:c+vf7YIqiwSy2obiKnhv0XFs7","tlshash":"f1a1b899f80285bae97714440848041121ac7bfab21588f1fbbead0a67b897dd754362","first_seen":"2026-02-24T16:01:19.457174Z","last_seen":"2026-02-24T16:01:19.457174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/bafdde61c9b147408bb3eda58d5dea88.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/bafdde61c9b147408bb3eda58d5dea88.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 16437\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"bafdde61c9b147408bb3eda58d5dea88.png\"; filename*=utf-8''bafdde61c9b147408bb3eda58d5dea88.png\r\ncontent-md5: LPEJSVm1LqCCom7GzsYx8Q==\r\ncontent-transfer-encoding: binary\r\netag: \"FtL0vKDv2FCQUARVVLpOLDqRJPgQ\"\r\nlast-modified: Fri, 20 Jun 2025 06:37:50 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: oQNOBp4G4\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: 2DQAAADkChaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"2cf1094959b52ea082a26ec6cec631f1","sha1":"d2f4bca0efd8509050045554ba4e2c3a9124f810","sha256":"897834ef0312e65ab3b08fb959cdb2607dd6acd67455226a9d3c05e4e56e210c","sha512":"9f3d69d7b554ed7f26f89aaff9a8884309c678464e968c76af36e35a02a08f9412df4a1263298047e70132c7beeac273daa914793f1a84529b3f89f9f8d8e480","ssdeep":"384:Dgy8EnqEIVzASRUQGSnlKHk9YkhA80eUV8NMXP3:MypIRrGDHk9WeMXP","tlshash":"5672d08a0315ec01f48d85e787282e2be749f6c5499223cdb5b6dc1be32f2c9d56598c","first_seen":"2025-12-21T16:32:24.685613Z","last_seen":"2026-05-27T00:23:28.932542Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2282,"timings":{"blocked":963,"dns":0,"connect":0,"send":0,"wait":1233,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zetagl0bal.com/api/common/type/defi_activity_type","fqdn":"api.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:57 GMT","end":"Sat, 02 May 2026 21:46:56 GMT"},"fingerprint":{"sha1":"77:3F:C5:81:1D:4B:12:76:A1:CF:6E:3A:38:1D:10:74:4A:1C:CE:A5","sha256":"11:05:20:4C:50:05:AB:28:9C:7C:2A:C8:59:14:5E:E0:5C:E2:2B:5F:27:47:18:1D:27:69:12:22:0C:21:70:72"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.zetagl0bal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.zetagl0bal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T17:31:27.7002Z","times_seen":17921660,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-bb257bc3.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-bb257bc3.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-331f\"\r\nexpires: Wed, 25 Feb 2026 04:00:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13087,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13086)","md5":"04a71179346a3e4fd25f5133a62d5046","sha1":"ee210529a03121e8a86d1c99c1f31284a108ce8f","sha256":"806f2c780006c9ac034cabd8ddb44840443a40fbdd2cd6b53c995ea2be1248a2","sha512":"a6a600b3f1b363f33ff3f25aa0f09898f405efcf793d87528fcb30725f9364f70269f4bf5c8b18037510e983f6440ba65299ea2db38bb9cfd9f3c0733f434a55","ssdeep":"384:JNb7Ftt9wdfqIEGnRzKpoAamuVLyN9HaaWvP/aRhCsTNT48l:TbB/9wd3NK7amuViaP/aRhCsTx44","tlshash":"2e42c756f6059a38e9bbb012409c0410b72dbfea100acde2f5bd6d963357ef8bb4d614","first_seen":"2026-02-24T16:01:19.515734Z","last_seen":"2026-02-24T16:01:19.515734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/currencyItem-33c14536.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/currencyItem-33c14536.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-453aa\"\r\nexpires: Wed, 25 Feb 2026 04:00:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":283562,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65518), with no line terminators","md5":"377cf2a68809a52d685285dace1791a5","sha1":"fb4b2da6afd7299d01a1ea9da1bf3e35943f3669","sha256":"7984f028d9e430422c75a7f11447370a36049c20f82f4e34fdab62622d36eb2a","sha512":"ff212016e78655a5bf9ccc2b34636c0e4aa9987d75084d90a02965f21b7b9b266fe3ce7615e2a4c70f46efea1b27c0d0dc00c8bc83646e81583f9bdce2ec793f","ssdeep":"3072:E8YlaWh2/mFDWg65nxpMFh/lwFoFUynlNjS0LQQw4zUz1:qaT/eW9klTFUybEQw4zm","tlshash":"385438eae315313297af13d6a46b07069333659d1946841cbabcc8f7181988d32bff76","first_seen":"2026-02-24T16:01:19.458552Z","last_seen":"2026-02-24T16:01:19.458552Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-b77481e5.css","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:51.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-b77481e5.css HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-4ab03\"\r\nexpires: Wed, 25 Feb 2026 04:00:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":305923,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"ac3baba1c47172698a3756ee1372dff6","sha1":"660100ffa85c23636a0903c233f68d7c5c0e2a62","sha256":"b77481e54178fccb63e1a52c71c34af9083c85a5f9e96bdfcc7eee8ad04715f0","sha512":"9c752ef104c35182041e5aa7c3dee49470454cdf7641287441e602742fe1a19e6fbfca4f60f4e5e84745561e09938f108d8509493cafdaf78fa2adaba043529c","ssdeep":"6144:nTN/9SpddBmkZ8w71ZACkFDS3vyf58rBeV05TD:TN/YBTZ8w71ZACkFDS3vyf58rBeV05TD","tlshash":"5f54d7a9a59011bc6f27aa7597ce5ad8f23ce6719c118de8f201600a4fc3ff91363617","first_seen":"2026-02-24T16:01:19.51727Z","last_seen":"2026-02-24T16:01:19.51727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":739,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/index-bb257bc3.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:52.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/index-bb257bc3.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-331f\"\r\nexpires: Wed, 25 Feb 2026 04:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13087,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13086)","md5":"04a71179346a3e4fd25f5133a62d5046","sha1":"ee210529a03121e8a86d1c99c1f31284a108ce8f","sha256":"806f2c780006c9ac034cabd8ddb44840443a40fbdd2cd6b53c995ea2be1248a2","sha512":"a6a600b3f1b363f33ff3f25aa0f09898f405efcf793d87528fcb30725f9364f70269f4bf5c8b18037510e983f6440ba65299ea2db38bb9cfd9f3c0733f434a55","ssdeep":"384:JNb7Ftt9wdfqIEGnRzKpoAamuVLyN9HaaWvP/aRhCsTNT48l:TbB/9wd3NK7amuViaP/aRhCsTx44","tlshash":"2e42c756f6059a38e9bbb012409c0410b72dbfea100acde2f5bd6d963357ef8bb4d614","first_seen":"2026-02-24T16:01:19.515734Z","last_seen":"2026-02-24T16:01:19.515734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/binance-coin.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/04/01/binance-coin.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 12869\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"binance-coin.png\"; filename*=utf-8''binance-coin.png\r\ncontent-md5: pTPuze5aeJ59lPj3n5XViA==\r\ncontent-transfer-encoding: binary\r\netag: \"FvGubfOpuvbb7JacbRq2IoUKKCiV\"\r\nlast-modified: Tue, 01 Apr 2025 09:44:21 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: BT3XNQJkS\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: ZVAAAADk9RWUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-12T17:51:56.947342Z","times_seen":937,"resource_available":false,"data":null}},"time_used":1970,"timings":{"blocked":990,"dns":0,"connect":0,"send":0,"wait":979,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/11/06/6c87f5b83b3d42ba88de4c3efa5a5643.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/11/06/6c87f5b83b3d42ba88de4c3efa5a5643.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 6644\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 9464179\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"6c87f5b83b3d42ba88de4c3efa5a5643.png\"; filename*=utf-8''6c87f5b83b3d42ba88de4c3efa5a5643.png\r\ncontent-md5: DCTNUhbFsYwg6/0jlwKQrw==\r\ncontent-transfer-encoding: binary\r\netag: \"FtapgAlUzLDYBWXMgJl_p04ZkO2c\"\r\nlast-modified: Thu, 06 Nov 2025 09:43:24 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: yQC8K1SYv\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: NfgAAABAcMd5mnUY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 264, 8-bit/color RGB, non-interlaced","md5":"0c24cd5216c5b18c20ebfd23970290af","sha1":"d6a9800954ccb0d80565cc80997fa74e1990ed9c","sha256":"f99ee6bad52f75065689dfd58a7d83c387d8c05ac9f539cde7981db1ea99e885","sha512":"219d755ef48ec67155534542084bef2489d72d9293f473e48061f91373ae2aa1d8cb970359bc3fb7b2ba20735b41aaf1ecd9435ab8075d7bb7a591407c1bc4b0","ssdeep":"192:S7y8eNAKBA5y4qEETP/GlIUIdW7Te8aShIuFOyKlCD:VBA5gEuXLvB856uwyKlG","tlshash":"e6d12956d6a703b35a4e2f2b41bb03d1f85b31d1b396f4911e1db676c4319c12d232ea","first_seen":"2026-02-24T16:01:19.520725Z","last_seen":"2026-02-24T16:01:19.520725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2079,"timings":{"blocked":975,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/20/3926a9a1a2f74f0390b42443c4216154.png?2.0.1757151594169","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:54.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kk.zetagl0bal.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 10 Feb 2025 10:21:09 GMT","end":"Thu, 12 Mar 2026 10:21:08 GMT"},"fingerprint":{"sha1":"CA:C3:D2:D6:17:42:7C:44:87:E9:93:0D:8C:36:49:D7:5E:34:E8:5C","sha256":"53:1E:E3:58:53:7D:1C:91:A3:D8:2A:5B:D4:38:DB:6C:FF:49:C3:4F:4E:C4:90:D9:71:D4:A5:A6:9D:68:96:BC"}}},"request":{"raw":"GET /daou/echo-res/2025/06/20/3926a9a1a2f74f0390b42443c4216154.png?2.0.1757151594169 HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 24 Feb 2026 16:00:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 8589\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 14639467\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"3926a9a1a2f74f0390b42443c4216154.png\"; filename*=utf-8''3926a9a1a2f74f0390b42443c4216154.png\r\ncontent-md5: F1VE8hIqUyF66njxNJ0zPg==\r\ncontent-transfer-encoding: binary\r\netag: \"FtHcCavVmyNCSEVVfA-rmCzPcmm7\"\r\nlast-modified: Fri, 20 Jun 2025 06:33:53 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg121;QNM3\r\nx-m-reqid: Z3KO1igio\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: kEwAAACeGxaUN2MY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":8589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 119 x 119, 8-bit/color RGBA, non-interlaced","md5":"175544f2122a53217aea78f1349d333e","sha1":"d1dc09abd59b23424845557c0fab982ccf7269bb","sha256":"513eba1e7cae77d04a41d69f5251f1a5b2d23739248ab1912724bd649a879c1e","sha512":"7e4052b6ea702f10bc0f29dc2595be360229237bf343e53575f763e92c7b08e009ab8feb0bce549a0561d7cead1f760aac31dbc4e93bb200aebfb376070610ca","ssdeep":"192:zqqeRmxjkmaJDxXnna0G5rd7oHT8Mb+0L5JvEEauVPK:eqJxNaF9a0GZaHT8Mb+Q5JvyuPK","tlshash":"3b02bea380f00003e7abe5762cdf5cadd95291f78eb0627a5147d160ab9008f3a0759b","first_seen":"2025-12-21T16:32:24.705265Z","last_seen":"2026-05-27T00:23:28.933052Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2263,"timings":{"blocked":964,"dns":0,"connect":0,"send":0,"wait":1233,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T16:00:49.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Nov 2025 15:57:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690e16ff-14fa\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5370,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"b79ae3a431a652ed152beb39c9ee3478","sha1":"d795730d126baa65d3585b2e6fef3f18ea3e0f4a","sha256":"85906778ea6b91465f1fa98159bd0351a562c3f8ca4eb9e3e6fb4e4cfc84c278","sha512":"9eaf77b043e37a0dae574cd1ace01aa87ab6a018e1fcc8095f1ab4a6b2fdb56a8b25c0f3b1538ce44e01ed1efb13d1281c89aad8ffeaee3e907cb2ebc3713765","ssdeep":"96:Tr82bl5yKuc67O8GvOy8t/chr6TCZydHRH/gb2mUsGKAiowGpuB1niH4iH/H/2:TFhL67svWWZCxfG2nfD3bpuB1niYiff2","tlshash":"37b160b76eb0c82a2356052aebd7b0089e7115a3851d4854b0cc90ec4fe1fd9c4dbb65","first_seen":"2026-02-24T16:01:19.523716Z","last_seen":"2026-02-24T16:01:19.523716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1796,"timings":{"blocked":775,"dns":280,"connect":243,"send":0,"wait":246,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.zetagl0bal.com/assets/filters-262d5627.js","fqdn":"h5.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"156.239.14.5","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.zetagl0bal.com/","date":"2026-02-24T16:00:53.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.zetagl0bal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 21:46:43 GMT","end":"Sat, 02 May 2026 21:46:42 GMT"},"fingerprint":{"sha1":"2B:3A:86:77:B5:4B:C3:57:76:F6:55:9A:C1:FB:52:CA:D6:1F:D3:39","sha256":"C3:8B:BE:39:84:B1:AB:CE:9A:B5:AA:F0:D7:B1:2A:64:83:0A:61:2C:28:9E:E9:F8:13:82:C0:CA:5C:62:71:54"}}},"request":{"raw":"GET /assets/filters-262d5627.js HTTP/1.1\r\nHost: h5.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:00:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 09:39:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc016c-c1e\"\r\nexpires: Wed, 25 Feb 2026 04:00:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"f5ba5102c897ddb3fa50df664e217c78","sha1":"5a1a9ce80e63802c5bd3c7291a1d63649239f589","sha256":"affb835c3d65970857218c3b14ebbbd6eff42a3da31981157ed1a451621e6110","sha512":"6f4c41ffc70d3b1ce590d8a748cc30e43e8e0ae32b75f5dcd248dc4f8cb6d8ac67390b589c0f3e33da346946574eb6f2ce8fac464953c4602078b78519dddaed","ssdeep":"","tlshash":"b55113fdfcd7a13356ea6ef940288454728eae20686e0a4df54bd0455973888e07f768","first_seen":"2026-02-24T16:01:19.49778Z","last_seen":"2026-02-24T16:01:19.49778Z","times_seen":1,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"h5.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}