{"report_id":"a6b6f6de-1b96-44e0-bb85-3fc140a05c4d","version":0,"status":"done","tags":[],"date":"2026-06-29T15:14:19Z","url":{"schema":"http","addr":"gtweeth.com","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"172.67.137.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gtweeth.com/pc/#/home/index","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"title":"GTCFX - Massive selection of products","dom":{"size":18694,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15780)","md5":"9d5c9427366c4b0ad734fa592ca5a881","sha1":"0a88befbc880aa8663003651d3c857c4e49e5580","sha256":"343279ed57bdb95bd3a62d0b2bce97994c9a61ceafe29bddce9e7642c1662a76","sha512":"a16735403eda9659a9683b7674ad23c7b4812bc0d264adf1b0aa0d437183baeaef54d5df522745dd287ee08f0d90bda36f903879f5c87887b139f90ae3fcfda0","ssdeep":"384:J7PLKDECznFSKDay/fDBTkdHVaEGfNdgaEzfndgdedHxZafqLF:lP1+nsGDBTijLF","tlshash":"a882a771d906216b41a398c8e4b1bf1a71d3eb0fc58988543abc738a4fd7db4ea513d4","dom_hash":"domhash50b29f9306c4dac21eecae348fb86b5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gtweeth.com","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"172.67.137.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T15:14:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kk.zetagl0bal.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-12","domain_rank":0,"first_seen":"2025-08-04T13:33:35.916282Z","last_seen":"2026-04-06T13:06:08.731932Z","alert_count":22,"request_count":11,"received_data":0,"sent_data":6468,"comment":"","tags":null,"fingerprints":null},{"fqdn":"webapi.gtcutc.com","ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":11,"received_data":42304,"sent_data":6730,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tetmksells.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":589,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.hfafmdp.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gtweeth.com","ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-29T15:14:28.405031Z","last_seen":"2026-06-29T15:14:28.405031Z","alert_count":0,"request_count":22,"received_data":19936959,"sent_data":10631,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.0.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]}]},{"fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-31T04:07:26.192616Z","last_seen":"2026-05-12T04:13:27.662688Z","alert_count":0,"request_count":3,"received_data":11991418,"sent_data":1793,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/vuex/3.1.1/vuex.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccce53cbb3813a63f1420eba489574af","sha1":"94ac9c787b2b96236356286c44350260c9f08a33","sha256":"1610512a47faf745fe96ac631be8ea3ea50a222fe7d7cca691f7ff8194b934bc","sha512":"78a2cf9dd160d4a451c1536de4d0037330d8ed11d07f0edaa427de7131a190af3c86d1a3f5bd858cac14f16ca70f78b2dc4bbe0124f7d3a2a4cce8872b95b8bd","ssdeep":"192:ViDaQv4w9nWp4UvouC3Dqs/778IG0zqLVFcu8XCnrdVpVAQflmGcXg3H8VnbZqlp:VeJgqnWp4kYj78p16CrdKMQ0CbMB+a4+","tlshash":"6a32cb9a73e1762aca57b0b0ac5f9c08f275a9dc1686400c6a4dc0f99c754bccb7ed9c","size":11653,"data":"","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-13T14:12:35.514491Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/vue-router/3.0.1/vue-router.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7656f4be720b1580847f9783d6ab4dd","sha1":"d3582fc6fb317199378638d2a12b4186fdee19eb","sha256":"9d5542c396b2102deb7390b39061aa7ae35f9329dfab9a34823cf84396b8cc13","sha512":"e31c23718a86b6a46355b975f29854ad874351005a9c634a56cfe8f4126198be7d6ca67cd95ba24135ce8cceb3b6dd1b4eaa8f9d4aadfe4061210f4c7b8052b4","ssdeep":"384:Oxwp+JvwAmXRZOYQFoB5RKbKBpZn6ySH1DhUxjImhFVP:Fp+JvwAGjOYQFoB5RK+nnTMa/hXP","tlshash":"b0b2c69db582b03247d326a0816f150bf23b7999744e84a8f2a9f4d43cbd85e8427f7d","size":24555,"data":"","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-13T14:12:35.477111Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/axios/1.0.0/axios.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76235a7ee6b454034b80a390ccc92f37","sha1":"8a84e29a036660955f3ebc42d43bb522730b5707","sha256":"3c92bac09bac9bfd77f2ced65b63e009c9b67c109a9d37de637b3573d7ec7adb","sha512":"35c36d820651548001703c6458cfb922c55c12bd8c0ed73a8d095f0656e45c345e0f4fb2fe0e037d14009020dc38bed1e349d110b3f9f2f50dcfa0f05f8cbd08","ssdeep":"384:3ao8KGKMMT6nbNp0nkJFP5F0YS6DagzzNYT9eei:VGNp0EPb46DaT9e1","tlshash":"f242a7ce78a1b0d747f320f0905f5a0fb2b6992a644d84a0e560e8f66db546e8737f4c","size":12969,"data":"","first_seen":"2023-06-26T22:56:34Z","last_seen":"2026-07-13T14:12:35.473556Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3015993abb02d6841fe7b2050de42786","sha1":"e75df9bc4ae53e97623a63dc5256653a20c9df28","sha256":"b85e960cb2ccff0d94c04b473937195dcbf721819a1fd203799cd369d2a9b7e3","sha512":"f674fe788853fa843808e866262e01d826d7ec4ef2f242afbd6c5908c44079c861c7ed3979a988c28f0d6af860f2aeb7f3345c2f406c3ffe12ab8d71234300ba","ssdeep":"","tlshash":"c611001ac9874c2b48a624696b9db10431b640574d09f416ba5e8b8d0f2ce3f42f6fee","size":1008,"data":"","first_seen":"2026-06-29T15:14:36.397416Z","last_seen":"2026-06-29T18:42:46.534692Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/js/app.40bcfdd3.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ea48ebe13b19f34f1d12edcfeba6197","sha1":"288d1106ebb2bc45a8ee81c9648f258d090ab41c","sha256":"b5aa62da2de19370b7ac2b1085d8b17a01ccaffd981ab6e1b26ab74425f417c8","sha512":"29e790267a97e05fe4f98b30d29ff89ea6baf2d1fc4f15450cfb5f9e2452aa785c7742961b5097ef2266132ff2bfcd13408af71eb324f43b85e8e2cf34a02453","ssdeep":"12288:AzhBVOwhJjwkdgIEo3DyMCDJ0xJEZMb7dZf5BgBFDEEIc96Ybsi52zi6v1S74UXq:EnERyicz474UXq","tlshash":"15e40877278bd8e721952380706ab6a5f16cb899f725f4d005f8c2cfe1e6906d807b27","size":680654,"data":"","first_seen":"2026-06-29T15:14:36.387431Z","last_seen":"2026-06-29T15:14:36.387431Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/charting_library/charting_library.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-13T14:16:28.211974Z","times_seen":1274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/vue/2.6.10/vue.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-07-14T02:11:52.657937Z","times_seen":4307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/element-ui/2.15.6/index.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"693f98461ce3fa58cbe5ac24d9a21b1e","sha1":"93661cc05514da433809e79f229815ae1ddbee77","sha256":"24ebdea828e938d3a45128b41979b320b4cbd40c8c0d4bad6a9cd9bc3bfa4e0c","sha512":"2dab95b96bfccc9f78069504b006adc198531831c53c81b23b8d05163428f0a66beefe7d466452e7142cbe98419e36d327b20ab24dd3c25a05de9f9363e05d3e","ssdeep":"6144:B4lry61ETrc+kymEidUVM+u0kXzVXsnDBH7SuLH8isMZgS7Lu5:2U61Wrc+kymEiuVM+k9uVHOuD7Lu5","tlshash":"d3c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","size":586253,"data":"","first_seen":"2023-03-07T13:53:00Z","last_seen":"2026-07-13T14:12:35.464036Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/avue/2.9.5/avue.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"750459dc86246c289cdf5b760013f43b","sha1":"8103e042309fe4007cda921497f28410a75656ba","sha256":"5df0b88dacc1f9ae9edc0adc120da6190632e03cea789186cfc49d532918d6bf","sha512":"f9db639a43a21ca3a54d2546999e885bc0057f1b29eb9c2a1b7e5510dfd284530992a97c9642d4ed87357a472b7274b229279fdd45251ad9bc7c03564747375d","ssdeep":"3072:8mWzlkGK5sT4v9rD/2S4oqJNtvywiDjD7TefeKceKsT1/tF8vUoa:8mXqJNtvywiD37TefeKceKsT1/XBoa","tlshash":"50540959f1cab8750ad76070003f210af2372b896409d0a4b679d9e1adbce4da16ff7d","size":300353,"data":"","first_seen":"2025-03-06T09:16:43.423938Z","last_seen":"2026-07-13T14:12:35.474038Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/js/chunk-vendors.073e2d5a.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"549168a59d90935acfc1b664ddd947a6","sha1":"23372538e1e0dd1ce2ec60dc07ccc09617fabf77","sha256":"cca8269c393758c1947285bd7d842a5e5b12263731e11c13e1fa38b15ffd9381","sha512":"6fc4eac1b5f14769ac1c6d079a01a019787d5bd0e7580a256f69a63457008365de5acd793833d6061cdaaf5bf2806ffa3663d9010e006ffc6f4da3255f1ccda6","ssdeep":"12288:k/y2jk/D6I+QmR/bBy2Qpr94WJqYRGEfx:wy2jOkwn4fBG","tlshash":"0105e6cdf2d6b0a113e770a5003f650bf27a6858780e8595f265e8d5bc78a8e513bf38","size":837137,"data":"","first_seen":"2026-06-29T15:14:36.354709Z","last_seen":"2026-06-29T15:14:36.354709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/#/","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"338a9fac24d8e9eb7eca99e84b829fdb","sha1":"7a81d6a12ee875e2181818ac6d54ebff81848085","sha256":"9538e036ace74824a3fa7b843c7088dc541e0a6350325e3711ce96d34718b4a8","sha512":"6cadb556b277c643d0958d4116f6bf12a64f9afbf45c08c90203d43493310b784e94d293c6820d104fa0aced91d1c1ff7428b25b65a983d427a8f44ec41eb13d","ssdeep":"","tlshash":"8ac012e631a196042d7007395acd1e21f4114333884c460e78bc5c002f734001168c74","size":192,"data":"","first_seen":"2024-12-02T08:41:53.660962Z","last_seen":"2026-06-29T18:42:46.532377Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/js/views.98a3fce3.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"680cb719cab1bdbd8f53a1d8b841a914","sha1":"e32673c05157df80303fdbddbc61b15a10d83e31","sha256":"9d4447ed26a2409dabeecdee50445bdbcf9d82d87c532fee6c47e0baf15bede2","sha512":"48a9e0c08b4b7b62aaaff422b9caba2657989b203007753e86a3aced26ee9750027a1a10724162a72a40caaf91b76f21e8dbf60a34596ff0c688e08d9807ca66","ssdeep":"12288:GZLk29OF7qVOfzMOnWBePramsVhcwWNJSdgUbQ3hSabpyALuP1V8IVrkkPApz8oF:kOhfzMgHPrRwWNJSdJ8bpVSdVF42I4I5","tlshash":"38e51a84b292b06ac69e6550042f410de379ba68740a806df735dce37de8e84762ff7d","size":3067368,"data":"","first_seen":"2026-06-29T15:14:36.400494Z","last_seen":"2026-06-29T15:14:36.400494Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"this.languageData.find is not a function","filename":"https://gtweeth.com/pc/cdn/vue/2.6.10/vue.min.js","line_number":6,"column_number":11752}]},"http":[{"url":{"schema":"https","addr":"gtweeth.com/pc/css/app.a687a4bd.css","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.248Z","timestamp":1782746033248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/css/app.a687a4bd.css HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-2c48a\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuRrmR1YhYiZR86m6NXyQQqPAHIJNWZnRZ3s%2B8%2BGW3C2XjD2iOwZUcyUmz6xWAO5JR7wVs%2FvUDlYj7Ii3kHRnj%2BEg75iW%2Fsg3dpuJTaKo9G4X%2FXhDL28iqmV%2BbakBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3ce3f723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181386,"size_decoded":25099,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"85e9920f8c0a5182b04e9527681b124e","sha1":"dfdfd5b300b550c7427467769162f3ae8320bc94","sha256":"a1e45744b823117b9ed93c9208d68a8b1f6c62cf2ff955079cd3b35da44652a5","sha512":"cdf20b390769f33c98bdcea971a56e7f889a275fa86cb8281d981b7139e52d4331cabb1789e845723f524df42640ab11fe1571b547b79cd7bf49170f2b9952a3","ssdeep":"1536:dp+tuu8IktwIPzdPUWlmAIS0oX3gwbwKyrtayUz6J1jJvX:dyuu8Iktw8oRwbwKoAye6JtVX","tlshash":"4f048321fb4b24e73287d24e6644b77a2b39b7b5d0011fb4f02e795e46c25872392b1e","first_seen":"2026-06-29T15:14:36.344098Z","last_seen":"2026-06-29T15:14:36.344098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":986,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/svg/loading-spin.svg","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.267Z","timestamp":1782746033267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/svg/loading-spin.svg HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:53 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tD%2Bhp2ZM8H0uYgflTAUmESR1iDnjMqRg7%2Fw7ZKOYM8uCRsRAo3eFTodZQ18CQ1Dpba6MkxTP9x0ZPT7ClmFqsLa3KDIgoHN29469F3qtqmmq6zoZF%2BT1pyVsN%2BUbIQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a4111fb-1a6\"\r\ncontent-encoding: zstd\r\ncf-ray: a135e0b3eec4723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":970,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"037f0a4f642ab8e77b624c3397411ebb","sha1":"32472bcb995af56caeecb9dd747bd56545fa0b8a","sha256":"8af421d321398026263f9eeb85acf0130787e4d66ee173dd2023d291b021d59f","sha512":"fc66e5c04f76fd183f2e64aa86ea80c93d24805219d3ac5b59968a535b27a4631905f389d02d93979bd1e941b81ca683040926d6257ef584ed341ce216ccdc6e","ssdeep":"","tlshash":"00e02bb9ec1e660f402e479b6aacd800239dd2f127050096e72c1c39680f419eae7149","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-13T14:12:35.492215Z","times_seen":281,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/platform/dev/config.js?1782746035465","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:55.715Z","timestamp":1782746035715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /platform/dev/config.js?1782746035465 HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mqzcykqg-c270aqgt\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nCookie: app_device_id=d-mqzcykqg-c270aqgt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:16:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCkGLPH5TGv%2BYpnMLUnLiU0Wg9FWk8VfQcZ%2BvBDyqSUW6uLxsKm8HblDsYYB7n51dU1mytHV5oOtn9fQsA9GxLeuLkNQW2Z6ZO%2B3wzALvs8QTLtyZ1ixeNjiaf00CQ%3D%3D\"}]}\r\nexpires: Tue, 30 Jun 2026 03:13:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\netag: W/\"6a411098-a6\"\r\ncontent-encoding: zstd\r\ncf-ray: a135e0c338a9723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166,"size_decoded":850,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"e576f20ffc3ddc9fe92ef7c388869315","sha1":"67e798a79a81fe3672c3a6e52fb73f026b49ef12","sha256":"f9a5dbbbadf3e57e4e8d292e18fbb7c6d9b588ada4973cce1baf330cc41a2422","sha512":"9fd5adc74568933197e508158a8a316b30c077704aca8a3678d54fb8044258db1864d7a76b0bc804359cdf0ca9bd4beae54b0b5656654c52a1d911c24131802d","ssdeep":"","tlshash":"84c04ce625759b092d70473a9acc5e31f4424333c85d421fb8bc5c002f7340415a8c71","first_seen":"2024-12-02T08:41:53.512891Z","last_seen":"2026-06-29T18:42:46.476903Z","times_seen":31,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.864Z","timestamp":1782746037864,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Mon, 29 Jun 2026 15:13:59 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 11950719\r\nConnection: keep-alive\r\nx-oss-request-id: 6A428BB7576758383237E6EB\r\nContent-Range: bytes 0-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Fq+h2big38MfdDRn0FG2pQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48544,"size_decoded":49152,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4fb0072173fbd219fc6e7ccc02fb89e6","sha1":"5068bd9308c8902f78216c5b7cb85539756b189e","sha256":"f2cfe8a880a0fabe158b497142e0d059da4b25e83d2b120896c5b4024379ccb1","sha512":"6c0b6c11a4d5887e1af0d721dea9c1b128e33d428c93b32a0127c7afecf5480d56f6b5852297a14520190b37e2b46c5c79869147ff417501650e2277dadaeaf1","ssdeep":"768:fEBHp3FCxEW7jIL599uCIc8wNAurh0ZjDgFLeFrU8zq5hNlac4jzuRQ:fmFFGEW7ULT9u1c8wN/rOjDjFA8SVa1B","tlshash":"422302117ebc945cc9aff2699f83e1d692d11a14d98d798810cfb582c01ff62e8b21ed","first_seen":"2025-11-29T07:36:03.07237Z","last_seen":"2026-06-29T15:14:36.350462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1740,"timings":{"blocked":-1,"dns":32,"connect":327,"send":0,"wait":336,"receive":57,"ssl":987},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/9e6ec6d5b9f349239a7195dc51983194.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.298Z","timestamp":1782746038298,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/9e6ec6d5b9f349239a7195dc51983194.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/16/91ac88b70f7d4094be0a7a79126a96aa.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.310Z","timestamp":1782746038310,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/06/16/91ac88b70f7d4094be0a7a79126a96aa.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/js/chunk-vendors.073e2d5a.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.253Z","timestamp":1782746033253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/js/chunk-vendors.073e2d5a.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-cc611\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9w7zo8B2Rn8q0bFiGfrd0r%2F6I39ukQYZFe3jPZ6do9BwpPqKhV7dRjP%2F8P0fP9AHGerW6PFzFAsNawfI9epjmDsvua9vSLK5rVCfZFL%2BrDOY%2F86VCZeLJ%2BB80%2FT9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3de5c723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":837137,"size_decoded":282003,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65449)","md5":"549168a59d90935acfc1b664ddd947a6","sha1":"23372538e1e0dd1ce2ec60dc07ccc09617fabf77","sha256":"cca8269c393758c1947285bd7d842a5e5b12263731e11c13e1fa38b15ffd9381","sha512":"6fc4eac1b5f14769ac1c6d079a01a019787d5bd0e7580a256f69a63457008365de5acd793833d6061cdaaf5bf2806ffa3663d9010e006ffc6f4da3255f1ccda6","ssdeep":"12288:k/y2jk/D6I+QmR/bBy2Qpr94WJqYRGEfx:wy2jOkwn4fBG","tlshash":"0105e6cdf2d6b0a113e770a5003f650bf27a6858780e8595f265e8d5bc78a8e513bf38","first_seen":"2026-06-29T15:14:36.354709Z","last_seen":"2026-06-29T15:14:36.354709Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1014,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.gtcutc.com/ws/ea5005bc-0121-4c58-ab75-108277631e58","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:55.706Z","timestamp":1782746035706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"GET /ws/ea5005bc-0121-4c58-ab75-108277631e58 HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gtweeth.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TAAaahwwmHzD6YrlADYMIw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Mon, 29 Jun 2026 15:13:56 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gtweeth.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: dMux5TMduCtaEVTQx0M/zbfouBw=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EAdr6pdpR6DJx6XdMhX0O%2ByMvGPjcoDl484fwWGGEuN6DpEJfNh6PwS1D5eC3IffmfW1j6%2BqbCdp0HttkdbgUWuG79Kdr6CohML903uOPXScz6pH5jUwjOL9DuAdDg3ZgMoCyg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a135e0c36ac4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1054\u0026min_rtt=1019\u0026rtt_var=453\u0026sent=5\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2664\u0026recv_bytes=1359\u0026delivery_rate=2875576\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=88868dd8d96b2901\u0026ts=752\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1074,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":24,"connect":26,"send":0,"wait":742,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/a58ddc5d6b8a4fc390d9026ea3a0f9ba.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.300Z","timestamp":1782746038300,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/a58ddc5d6b8a4fc390d9026ea3a0f9ba.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/c730913a9ab1494d92b9bb71ce7f97b5.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.304Z","timestamp":1782746038304,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/c730913a9ab1494d92b9bb71ce7f97b5.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/12/22/63fb8b7a21af4651a935ec469e434741.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.309Z","timestamp":1782746038309,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/12/22/63fb8b7a21af4651a935ec469e434741.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/16/30fc28bfcb774a87899386d25c7ec48a.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.315Z","timestamp":1782746038315,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/06/16/30fc28bfcb774a87899386d25c7ec48a.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:59.611Z","timestamp":1782746039611,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=11927552-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Mon, 29 Jun 2026 15:13:59 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 23167\r\nConnection: keep-alive\r\nx-oss-request-id: 6A428BB7D72D2036360EF964\r\nContent-Range: bytes 11927552-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 77\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":23167,"size_decoded":23741,"mime_type":"video/mp4","magic":"data","md5":"4800ef247297f25d863add4a83165043","sha1":"d1579ce2e9b9780a79e6973377047e8b3ca15c72","sha256":"758467e2f317ac264884f382f7bec1c4bb33b6dd278a27d20cbe5ec03421a5a7","sha512":"bd4af4a4ff9a707360538e45e8ad8b34f0c9bc895d627b91331deab92c40cdb151a7bdf4f6963810de70e12ebf782125cbca4808ace8552fbfaf1747f12fbc7b","ssdeep":"384:2NsWV6+6L7womPOklR9XsJDC9uqAry3qnerq:OJV6t49Qdryhe","tlshash":"cea26a99f3754453da580bbd09fbc752b724e220375b4b4b53487b09fda8a94ae234c8","first_seen":"2024-12-31T04:07:32.409815Z","last_seen":"2026-06-29T18:42:46.445771Z","times_seen":16,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/vue/2.6.10/vue.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.257Z","timestamp":1782746033257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-16deb\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9sZD4xA6%2FOKy8o0c1IQrx9AV9vCiICOIxh9v4Kx7gjFDMj7Kw56gC1ks6rjL6gxvuCFGukafglOIeCj02wP4wrbN464Josgdhe8TyeScN6r2KZxL25ijjlupNyWtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3de71723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93675,"size_decoded":35070,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-07-14T02:11:52.657937Z","times_seen":4307,"resource_available":true,"data":null}},"time_used":1003,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1003,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/axios/1.0.0/axios.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.261Z","timestamp":1782746033261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/axios/1.0.0/axios.min.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-32a9\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2e3w2G5lA2yOUONVnZwyzw2fg%2FOw1pZLh7v1qE28Nwj9FHzLsu2P%2FA7%2F6HnadzjSuMHFlddhrPUIyFqg0YeDy6dz2Rl1QdK8pnFPH3be4qJ%2F%2Fe%2F8Id1ejtRhcfyfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3ee88723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12969,"size_decoded":5482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9720)","md5":"76235a7ee6b454034b80a390ccc92f37","sha1":"8a84e29a036660955f3ebc42d43bb522730b5707","sha256":"3c92bac09bac9bfd77f2ced65b63e009c9b67c109a9d37de637b3573d7ec7adb","sha512":"35c36d820651548001703c6458cfb922c55c12bd8c0ed73a8d095f0656e45c345e0f4fb2fe0e037d14009020dc38bed1e349d110b3f9f2f50dcfa0f05f8cbd08","ssdeep":"384:3ao8KGKMMT6nbNp0nkJFP5F0YS6DagzzNYT9eei:VGNp0EPb46DaT9e1","tlshash":"f242a7ce78a1b0d747f320f0905f5a0fb2b6992a644d84a0e560e8f66db546e8737f4c","first_seen":"2023-06-26T22:56:34Z","last_seen":"2026-07-13T14:12:35.473556Z","times_seen":296,"resource_available":true,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/favicon.ico","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:56.320Z","timestamp":1782746036320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/favicon.ico HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nCookie: app_device_id=d-mqzcykqg-c270aqgt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:57 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFOBUPuR3lYXssZ31TZP5Y0jzuB1uzC7Umt3IxlB23sPbTmj8rVRt4FFH%2BhpwvPXm%2FtOQcZiOxdro9P61eib3U1Py4J4Lx0lCwdUGcRQV%2Bqrqt6W8VcGeHg4JsI61g%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a4111fb-70076\"\r\ncontent-encoding: zstd\r\ncf-ray: a135e0c70f09723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458870,"size_decoded":41747,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 10 icons, 256x256, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"c9b19288724cff2b153eee0e59668b7a","sha1":"68c3be372a3d1cf4ed92638cd056096126386cc8","sha256":"3c0e28043de6b313e46169d72af1bd23425bb43b33a8280f57e2e89a50728f73","sha512":"8b351a912c2a7e35b74a78478f1d6bb602603bb38d2164b72144c8aaac9225505fea1d7ae685d342acb3d4bf541ae56cff810f33cebbb52f5c5d5ae16d1ac3fa","ssdeep":"1536:K7spS5u3LqjyY9guqxz6GsgxTZWXdbIF15vNKRyLHSHLkT6C0kaZgjTV/:7btjxzVPl+CrV/","tlshash":"81a4fcd2b8c2d559ec292f34a835cdea002bbea5bc75f94a7d84739f57732c29021523","first_seen":"2026-02-24T16:01:19.499299Z","last_seen":"2026-06-29T18:42:46.512648Z","times_seen":4,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.834Z","timestamp":1782746037834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtweeth.com/\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9xQL39T6XaSO409UtfA%2BJlhZgFfkF7ssCBokpFqgnAiTpiPCmJiL%2Bzr8hsKQJQBV%2Br3rTMKUvzS9NL8H%2FAqQCo4PPgmortLpmzGaeMYxmjoS9fHEWSkRTbqmV93v2ytH7b4CA%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a135e0d07f5b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":961,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/12/22/62d3709e98b346f88c7063bd77f81430.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.302Z","timestamp":1782746038302,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/12/22/62d3709e98b346f88c7063bd77f81430.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/0c8c12cc9884401aba4d11d362bf9974.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.305Z","timestamp":1782746038305,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/0c8c12cc9884401aba4d11d362bf9974.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T15:13:52.473Z","timestamp":1782746032473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:53 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:19 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sau5GQ5JOtEUeIzAjVTkoEytLOYYp7sOTO4LzdzmsjrvKuCM2HCi2Qt0vgKZg0IiT1RI8duOEyQl8f7pnKWOb98KFmpVpINtuMSq6T7spw7emya5PHN4jyfbUKoFbg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a135e0af0d2b723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.0.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4330,"size_decoded":2507,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1377)","md5":"029c03ea546359ba88632bc901da8077","sha1":"4730480539f9e883d2990346cef41e1c0d2cc364","sha256":"b3f3cbe0464fcfa5754940051f895a7d00ca0a40f6c9e27884c943132e003ccd","sha512":"54ed6a3d355b71a083f25f9e32e552eea82d8fea7f5988babdc848b19b12ba8e2fb3ce608abae5b5cb1925270af75592b6baa6c7aa802347a203a55cb2128399","ssdeep":"96:AdJsRqgadjE56ymzC7oxeR34X50DGHnb57uidLF:AYRqgg7ymzqWeHGNuidLF","tlshash":"a09184568d16c54f25620d69e7fab20840a5e04b9d91cc28b9bc178c4f7cbcd8da3b9a","first_seen":"2026-06-29T15:14:36.364571Z","last_seen":"2026-06-29T15:14:36.364571Z","times_seen":1,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":718,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/vuex/3.1.1/vuex.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.258Z","timestamp":1782746033258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-2d85\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUkED21EtDc8ogguTCaTrboqLJXVjKZ%2BjPFZcDqsvpPEUUd7JgyvU8qhCpafkNzfqxvmHqk7GMOf4TsPSHOpLDvYV8dPz1HPKlGsLeZC5zYzzEu5gOtdbriZ9WcIwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3de73723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11653,"size_decoded":4021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11593)","md5":"ccce53cbb3813a63f1420eba489574af","sha1":"94ac9c787b2b96236356286c44350260c9f08a33","sha256":"1610512a47faf745fe96ac631be8ea3ea50a222fe7d7cca691f7ff8194b934bc","sha512":"78a2cf9dd160d4a451c1536de4d0037330d8ed11d07f0edaa427de7131a190af3c86d1a3f5bd858cac14f16ca70f78b2dc4bbe0124f7d3a2a4cce8872b95b8bd","ssdeep":"192:ViDaQv4w9nWp4UvouC3Dqs/778IG0zqLVFcu8XCnrdVpVAQflmGcXg3H8VnbZqlp:VeJgqnWp4kYj78p16CrdKMQ0CbMB+a4+","tlshash":"6a32cb9a73e1762aca57b0b0ac5f9c08f275a9dc1686400c6a4dc0f99c754bccb7ed9c","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-13T14:12:35.514491Z","times_seen":244,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/css/views.ef475aa4.css","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:55.710Z","timestamp":1782746035710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/css/views.ef475aa4.css HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nCookie: app_device_id=d-mqzcykqg-c270aqgt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-df18b\"\r\nexpires: Tue, 30 Jun 2026 03:13:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7aB6nfLWocWo%2BaF0ku63IElPES6%2BS%2Be7C1tSUDoSzjxSAsXCHgO4nuN3Ju5tSOl5Ma7t5%2BzEhdoXn3DEAPkds3qmWY9XK9Lr%2BwAGnByCFtYXUEYtPzcD784JnCl%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0c33898723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":913803,"size_decoded":94053,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9e1d93829503c566caaff2e5d8d9040e","sha1":"0636dcc3e5b51b8521a308e7e51bbc66d1d438f5","sha256":"55c55b86aca0add2e6826f5ea5a154a1855235a5a8d2cee2bedce9ca827449be","sha512":"6fd7dad514cac73e00d895c1400c13c563da7a969e98972865baca1ad613198bda2296a4b83466d0fdbcfe979ad4e5e8d730ed06f739230de46680d55d7cb4b9","ssdeep":"12288:c3T98UbiI7dLeHK9wVYHKemDXM58rkiweZB6zuZuXqRZiQuCm7nt9bXOs24XpY0X:c3T98UbiI7dLeHK9wVYHKemDXM50UMi","tlshash":"5915d962736a252b70bbca1861d07f7a391cf673d10257f89a557929cbc3583332b60e","first_seen":"2026-06-29T15:14:36.367786Z","last_seen":"2026-06-29T15:14:36.367786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1020,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/common/getAllSetting","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:55.716Z","timestamp":1782746035716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mqzcykqg-c270aqgt\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:58 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IeVZDAsM7Ez3MGS6CEQF8Ak5aN54F4UYct0SWbF1kuJD4F6yI6jkQAFab49Q9bJdRa0bPczSMyI%2FWO4D9kMsC57xADpaNxNgKjB23%2Bn%2BTRic20LwPWItBJtX7FnZ%2FBDb8qpUwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135e0c84e9056b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15606,"size_decoded":5425,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15222), with no line terminators","md5":"d4bcb31d18240e5e78d2c94255d7068d","sha1":"d8b689aafb030d08587082eccfadb4747ec3dae5","sha256":"0ce23b4f7505c96821f4fbeb71422df8693882abe641ca8b5d2ce6ac4cda751a","sha512":"2755a9251a37b8e0e5a0635dcaf815711858e56edce1e757fe33204634a39c50b053f90bd711dc93851309465a8b0d335812c8811a7462b211a9d1bd6a2f8b8a","ssdeep":"384:GpDLE8uPRdWQiNike1bTk4x5HIALGMcKy3om2edG:GpDLE8sRdf3nk4x5HIALGBKy3J2e0","tlshash":"0b62719a31ecdcbe57df16c290ef395579ec1857d888ad11e0abef4c98d29b8480f049","first_seen":"2026-06-29T15:14:36.371173Z","last_seen":"2026-06-29T18:42:46.48346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tetmksells.com/daou/echo-res/2025/04/30/2cfa9d1167c44147ba352a56acfd8557.png","fqdn":"cdn.tetmksells.com","domain":"tetmksells.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.816Z","timestamp":1782746037816,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/30/2cfa9d1167c44147ba352a56acfd8557.png HTTP/1.1\r\nHost: cdn.tetmksells.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/common/getAllSetting","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.829Z","timestamp":1782746037829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtweeth.com/\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VphLS3UdW11zCuHiz9JR2TPc3ywFFHWKHF9VhCI8bRkH5swWQKNvcRhXRiW3UjtTA5h7hI3JLcnz2xAxYsjOLmZuwIYml3gTg2Iezp%2FRWubS6Nu9q132A6NGmyK1Z9dpNNfNfw%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a135e0d07f5956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":955,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/06/16/b8de90f3d309479285f9220c63aef7fa.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.314Z","timestamp":1782746038314,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/06/16/b8de90f3d309479285f9220c63aef7fa.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T15:13:51.288Z","timestamp":1782746031288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:16:24 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gaX1WuYwrXWXh2UH8KuKG0Ihr5div38j6WcOkh%2B3LScD%2BaHpCmz9c2CUUB0SkARV1i8Uh4jRTPf2zOyIKkfeym7N7oLE%2BM2UTq8rptYApD4nkZ863R7Zwnm6MaC9VQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a135e0a86c5c56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/common/getAllSetting","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:55.720Z","timestamp":1782746035720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtweeth.com/\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sv92qVr4UZc%2FU3FUyEjVrgNkWKw028GfyEPAQvXBIXTL1rJzY9mRW34dgLKBy%2Be%2FAI24pUtsn7%2F8QXaPOyFIZv24uTfihPBVHLD6EOY1JpgoTZKOF6Q91oCjab7uE8qOlwHyxg%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a135e0c35e5656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":961,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":0,"dns":0,"connect":12,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE\u0026status=0\u0026pageSize=1\u0026pageNum=1","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.842Z","timestamp":1782746037842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"OPTIONS /api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE\u0026status=0\u0026pageSize=1\u0026pageNum=1 HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtweeth.com/\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGQTdnroglKRaVgOOsv02DCOQiBasyRAfEHPtC%2FtbANDeKZ3eXzaQJSdxWPPeKAa7YbMwIebOiPs3cBiV4tN51EXWa8PloIct3akO1BWt13UbSNNHwJtUJh7eO%2Bu75Zi5d%2FoUA%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a135e0d08f5f56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":959,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hfafmdp.com/echo2-ress/echo2.023f1fb498edc4d019473d6a48ab35490.png","fqdn":"cdn.hfafmdp.com","domain":"hfafmdp.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.293Z","timestamp":1782746038293,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /echo2-ress/echo2.023f1fb498edc4d019473d6a48ab35490.png HTTP/1.1\r\nHost: cdn.hfafmdp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/12/22/5300c94a376e441a802234735109f924.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.307Z","timestamp":1782746038307,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/12/22/5300c94a376e441a802234735109f924.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/12/22/827c8fe2e9564cde8a6ca6c11184139f.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:58.312Z","timestamp":1782746038312,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/12/22/827c8fe2e9564cde8a6ca6c11184139f.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:14:00.027Z","timestamp":1782746040027,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=32768-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Mon, 29 Jun 2026 15:14:00 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 11917951\r\nConnection: keep-alive\r\nx-oss-request-id: 6A428BB8D72D203636D0F964\r\nContent-Range: bytes 32768-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 44\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11917951,"size_decoded":11918525,"mime_type":"video/mp4","magic":"data","md5":"336b475b5feb8c45feaa1f6151ae1201","sha1":"a94cd3ae740eab4075b3acfe742d44357e0868f4","sha256":"adf808a5dfc9fde4019344950b3fd6f8465f32a1bdb92451054eb909002e6eb1","sha512":"75cbf6c183758551073053c4e601fbd27490971d3ca2914676cd6faa3f1f7d04aaf36392a610b85c3c272fef2707bf815c9008bb69ea1d8d82e939e94b60be58","ssdeep":"24576:hGyUAPnCOynr+umg0ohwbHgSdX1o2QPngmOEc4eBnhsm:UfTOySuHwbgM1uXVtm","tlshash":"c425337a6bc6109df0e42a0c827f2147b5059250c14ca3c40ceb9b66f97fdc7aa76d9e","first_seen":"2026-05-12T04:13:33.083596Z","last_seen":"2026-06-29T18:42:46.479914Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":2759,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/vue-router/3.0.1/vue-router.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.260Z","timestamp":1782746033260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/vue-router/3.0.1/vue-router.min.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-5feb\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IdwyW%2FXDhrxxs%2BNAhZkfgFNDmbbjwmCYr7N7wI9WcMXe5k16hwqyXPAhBNt3ikyGDxOCXKbftr2X2DNvj4fB8JLS2iltId92SPb6HTrmcgh5KHLEP41TmR9VTjyjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3ee80723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24555,"size_decoded":9417,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24485)","md5":"a7656f4be720b1580847f9783d6ab4dd","sha1":"d3582fc6fb317199378638d2a12b4186fdee19eb","sha256":"9d5542c396b2102deb7390b39061aa7ae35f9329dfab9a34823cf84396b8cc13","sha512":"e31c23718a86b6a46355b975f29854ad874351005a9c634a56cfe8f4126198be7d6ca67cd95ba24135ce8cceb3b6dd1b4eaa8f9d4aadfe4061210f4c7b8052b4","ssdeep":"384:Oxwp+JvwAmXRZOYQFoB5RKbKBpZn6ySH1DhUxjImhFVP:Fp+JvwAGjOYQFoB5RK+nnTMa/hXP","tlshash":"b0b2c69db582b03247d326a0816f150bf23b7999744e84a8f2a9f4d43cbd85e8427f7d","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-13T14:12:35.477111Z","times_seen":250,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":748,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/common/getCoinList","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:55.718Z","timestamp":1782746035718,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mqzcykqg-c270aqgt\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/common/getCoinList","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:55.721Z","timestamp":1782746035721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,x-device-id\r\nReferer: https://gtweeth.com/\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzFI%2F07%2BIwNGlOQWoSiqGIO4DpuqWdjpvEJ25ih7gdXfAzvnSc6MN%2BvaZ3tUGuxYgGj9H2LmGJUedckkCmXX3ZSu6LxaiFQI8TsX%2BULjNa1qCVpmfULvvYaFAyQzgHs5OAL1aw%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, x-device-id\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a135e0c35e5556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":961,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T08:18:33.26119Z","times_seen":17232497,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/js/views.98a3fce3.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:55.712Z","timestamp":1782746035712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/js/views.98a3fce3.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nCookie: app_device_id=d-mqzcykqg-c270aqgt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-2ecde8\"\r\nexpires: Tue, 30 Jun 2026 03:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSqhdwvw6n9usIQegDjxi7EauhMrIP399x680%2BWXl1R6%2B4xlNz4xXSCZvj6ql8EhAMMcpVyTS8FgbfdsC%2FsfvU1Nsc4mpkKzFpbS%2BM459AU9waoXHhNHxa79hByQCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0c3389f723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3067368,"size_decoded":807513,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65402)","md5":"fb68f1e32b3ec189b9df4403659e2a46","sha1":"a1e9fe79ed2156fed8ebfbb8ca61b2c8232b5d61","sha256":"4be7d59188c00e390451cd1ad6f7d27041e4530b580f5d2b14b6b94f31796e87","sha512":"96f01d3d8eccb90933213548016a286e844ec0f2c7bc9ab852c4e42d872e0d637867ad30106aec0b37b3c926241bf4354d1b7a6527e285d232c69717ab7ab7e9","ssdeep":"6144:ypTlZFkBZG9axzF7efVpe1fsJNIp1ADq+4g2heZAnWPxj7Sfiio0shW3KO2xvLh6:GZLk29OF7qVOfzMOnWBePramsV8","tlshash":"b1252b08b296b06ad69f6054142f1419e2797a586407c0adf378cce6bde8d88372ff7d","first_seen":"2026-06-29T15:14:36.378298Z","last_seen":"2026-06-29T15:14:36.378298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/element-ui/2.15.6/theme-chalk/index.css","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.239Z","timestamp":1782746033239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/element-ui/2.15.6/theme-chalk/index.css HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-3a430\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lA7oAun2ZxnqvXy0PXYgmUi6M90R%2FQy7xMTKudDEoAUFDtMJ%2Flx6dFhuRigIXW6wGepHCTY4frSShJ1aUgWmRVJgSpuC0eRmlwYQw7epVIGO5mEkJAURf5XyqtbwXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3ce03723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238640,"size_decoded":37966,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2e0bf3411d54afa6402c0f114fc5a7cb","sha1":"0fcc1045629f8fa599d74eb33e44e5eb2406fd49","sha256":"c8df4deb1eaf507ea9e4c383d563c8f3bb6d35c0df018d5623a8e93d28df2a57","sha512":"4552f7d4f4119c1421778860f37fe49c27c28a0f77f957a9f176fab0001edb32e7b999a718e527087cf3a9c9c1c08d2e91daa01d357c2738fd48b606c47643a8","ssdeep":"1536:f28Y7SrW3YeWXA1u9w4HCe/l4Ttg5fqMEL0e/78OaiZkW1YO8eQFsGmtf0IcXyrc:k3H0Rkfeyl1hUEDw","tlshash":"0b34a7219b07216b612bde6db6c0ba895f18c323d4725bbbfe95740cc7d34891263a4f","first_seen":"2025-03-06T09:16:43.421068Z","last_seen":"2026-06-29T18:42:46.492759Z","times_seen":49,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":950,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/avue/2.9.5/index.css","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.241Z","timestamp":1782746033241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/avue/2.9.5/index.css HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-153f9\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqQBZmeEtXA2UcuE0JUyxE%2BepY3%2FKXUABytYNWyw99hkddwREQRymNIUoDeKMR4x75UA6jKVU7wX1oPLxfZLzag96bJZsuTJlPimIl310uY%2FMSXfsuj3rGdM92NvQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3ce0e723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87033,"size_decoded":13936,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f85e11dcb08e7df97a595b462fc1e5fd","sha1":"4a21a20075980f155f0880ff27c3681413bf91a4","sha256":"0d6f8a0ccc1a2588ea5b922811dc52facc493898321a9ab48f9d4f469db5ccab","sha512":"5a944b594ffb9ac17ab736c56f04c12db40e3371b5fb01da19ab6bb421eeb12788161552a5281c4e1e3e5e523de204a9d4bd8c0ca9b3295bdae4a4875f4a5a7f","ssdeep":"1536:3ZpTJrrdtEOddi1H0jsamI897x9RUEAhgFRJgQwwCvpyR0ol1vk27rnIRf:JpTJrPEOdddAamr97x9RUEAhgFRJgQwN","tlshash":"918340625e7b0c09e80add542bd8177d37282053880ad9fb7ef931484f8679d47a2f8d","first_seen":"2025-07-19T06:38:51.487767Z","last_seen":"2026-06-29T18:42:46.470482Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1019,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/charting_library/charting_library.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.243Z","timestamp":1782746033243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/charting_library/charting_library.min.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-2a6a\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqOUhq9vEoijC9fCueTToeVUU7OBNV1jaMoQugWK%2B48GvFIZI%2BZ6Faz4z0HXGep%2FN2fLL9S424Fuw402E%2FUhiKBeiSt3OLmaLi2mfxbZMtQHXDj7lP9L78FQSJTKGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3ce1e723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":3945,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-13T14:16:28.211974Z","times_seen":1274,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/element-ui/2.15.6/index.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.262Z","timestamp":1782746033262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/element-ui/2.15.6/index.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-8f20d\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXL7%2BBe2i%2BIexXcRpcwuvSnYN9CdmdFTu1ygckfq6npIa4DHQ6cJT7jFxJJD%2Fo4xXYCZ1ecTDaOJM%2B7%2B62IImxVNjb5LVju6a%2Bss0zmUDmbGbbtB8mUm4i8t0BErcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3eea3723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586253,"size_decoded":151986,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"693f98461ce3fa58cbe5ac24d9a21b1e","sha1":"93661cc05514da433809e79f229815ae1ddbee77","sha256":"24ebdea828e938d3a45128b41979b320b4cbd40c8c0d4bad6a9cd9bc3bfa4e0c","sha512":"2dab95b96bfccc9f78069504b006adc198531831c53c81b23b8d05163428f0a66beefe7d466452e7142cbe98419e36d327b20ab24dd3c25a05de9f9363e05d3e","ssdeep":"6144:B4lry61ETrc+kymEidUVM+u0kXzVXsnDBH7SuLH8isMZgS7Lu5:2U61Wrc+kymEiuVM+k9uVHOuD7Lu5","tlshash":"d3c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","first_seen":"2023-03-07T13:53:00Z","last_seen":"2026-07-13T14:12:35.464036Z","times_seen":521,"resource_available":true,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/avue/2.9.5/avue.min.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.263Z","timestamp":1782746033263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/avue/2.9.5/avue.min.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-49541\"\r\nexpires: Tue, 30 Jun 2026 03:13:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8L4vVGJDDaXHkVAE51n47XVOuSF4m2S463rGxZT8lg%2F2R0ElZMUXA7bIoa3XQRavOdUspDcGTCUwAdLsGTlLPBAi65n05xM%2BAZbbkwxc9LAZrDs%2BcurXRmwXLsraPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3eea7723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300353,"size_decoded":78274,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55624)","md5":"750459dc86246c289cdf5b760013f43b","sha1":"8103e042309fe4007cda921497f28410a75656ba","sha256":"5df0b88dacc1f9ae9edc0adc120da6190632e03cea789186cfc49d532918d6bf","sha512":"f9db639a43a21ca3a54d2546999e885bc0057f1b29eb9c2a1b7e5510dfd284530992a97c9642d4ed87357a472b7274b229279fdd45251ad9bc7c03564747375d","ssdeep":"3072:8mWzlkGK5sT4v9rD/2S4oqJNtvywiDjD7TefeKceKsT1/tF8vUoa:8mXqJNtvywiD37TefeKceKsT1/XBoa","tlshash":"50540959f1cab8750ad76070003f210af2372b896409d0a4b679d9e1adbce4da16ff7d","first_seen":"2025-03-06T09:16:43.423938Z","last_seen":"2026-07-13T14:12:35.474038Z","times_seen":213,"resource_available":true,"data":null}},"time_used":1627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/js/app.40bcfdd3.js","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.252Z","timestamp":1782746033252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/js/app.40bcfdd3.js HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-a62ce\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKEW8LaiTUerj6FhmAH1lGJGYBdv%2FozxNWbAzq6sKB6LwSHV16C9oEoNySGLQ3Y8BeGOlO%2F1BIOPNl7jDVBRRYt2RgbK%2BJsrKtDVH5ALuAI2%2F5S4xrQnW7kOZdQIIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3de55723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680654,"size_decoded":175834,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65473), with no line terminators","md5":"8ea48ebe13b19f34f1d12edcfeba6197","sha1":"288d1106ebb2bc45a8ee81c9648f258d090ab41c","sha256":"b5aa62da2de19370b7ac2b1085d8b17a01ccaffd981ab6e1b26ab74425f417c8","sha512":"29e790267a97e05fe4f98b30d29ff89ea6baf2d1fc4f15450cfb5f9e2452aa785c7742961b5097ef2266132ff2bfcd13408af71eb324f43b85e8e2cf34a02453","ssdeep":"12288:AzhBVOwhJjwkdgIEo3DyMCDJ0xJEZMb7dZf5BgBFDEEIc96Ybsi52zi6v1S74UXq:EnERyicz474UXq","tlshash":"15e40877278bd8e721952380706ab6a5f16cb899f725f4d005f8c2cfe1e6906d807b27","first_seen":"2026-06-29T15:14:36.387431Z","last_seen":"2026-06-29T15:14:36.387431Z","times_seen":1,"resource_available":true,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":944,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/fonts/DINOT-Regular.d5ae250f.ttf","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:54.292Z","timestamp":1782746034292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/fonts/DINOT-Regular.d5ae250f.ttf HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/css/app.a687a4bd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12381068\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\netag: \"6a4111fa-bceb8c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7cmTEd0pkNMj1S7%2F9hFXVRkSOTSyEQJCMxKkQHSf441efFgWg1w9gg2zzjpZZFHc3g07tNBU%2Bh%2FPCLNqUu0q2CYMOl7gzraLnLWysDj0%2FwGfNoFSV8iIqnJ6swbfeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0ba5f9f723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12381068,"size_decoded":12381800,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-07-09T10:12:35.007534Z","times_seen":72,"resource_available":false,"data":null}},"time_used":3682,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":747,"receive":2935,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/common/getAllSetting","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.824Z","timestamp":1782746037824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mqzcykqg-c270aqgt\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:58 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRTJRdmGDua4zzlaKMMfoT3PY7olLARGyhBrO0dljtP4sRR%2FJMJ2Iuh2zTHTofTQScw8OMBCHhJo%2FXmo0BJLC%2FfOMgQnG2Nm8zFdJm3UedGXobKhYMi2ZZDR4ShuhEZqyoG5Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135e0d21f7b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15606,"size_decoded":5423,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15222), with no line terminators","md5":"d4bcb31d18240e5e78d2c94255d7068d","sha1":"d8b689aafb030d08587082eccfadb4747ec3dae5","sha256":"0ce23b4f7505c96821f4fbeb71422df8693882abe641ca8b5d2ce6ac4cda751a","sha512":"2755a9251a37b8e0e5a0635dcaf815711858e56edce1e757fe33204634a39c50b053f90bd711dc93851309465a8b0d335812c8811a7462b211a9d1bd6a2f8b8a","ssdeep":"384:GpDLE8uPRdWQiNike1bTk4x5HIALGMcKy3om2edG:GpDLE8sRdf3nk4x5HIALGBKy3J2e0","tlshash":"0b62719a31ecdcbe57df16c290ef395579ec1857d888ad11e0abef4c98d29b8480f049","first_seen":"2026-06-29T15:14:36.371173Z","last_seen":"2026-06-29T18:42:46.48346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.827Z","timestamp":1782746037827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mqzcykqg-c270aqgt\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:58 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63YwIeBtP38SSFe6iSVkTQGM4dE%2BjybRn1iVUphSfh26W18RaYo7Jc7zBiyi8CyR7PEHI%2BTCDv8%2BD5eXj4ksjCf76STb9g03pJnj5quYklRvWOovhO2WWlVC3OsdE2GFBWRJXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135e0d21f7e56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1122,"size_decoded":1567,"mime_type":"application/json","magic":"JSON text data","md5":"7f8cdd2b3425539d80eafc14ebfb5b6b","sha1":"7f2672e9ec96f4edabe62b05b4c72c80a3000012","sha256":"d1fdd052813672907f296805a695d8c8a22dd0c74a51cd48b6267c3e78caf8e9","sha512":"e6a45b7b62f4a14dfe67aabd077d82c76716e70255a6ac01ce8e54565800b52d6c1e1804715ab45c27e2783583b3ab6afcd7185ce95f5fb0228088e8d31c5249","ssdeep":"","tlshash":"0a21004a223c9e71441651b373ccfdc9a2be1697d6a28d78855ecf2c03f14b91b2b585","first_seen":"2026-06-29T15:14:36.39112Z","last_seen":"2026-06-29T18:42:46.5064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.gtcutc.com/api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE\u0026status=0\u0026pageSize=1\u0026pageNum=1","fqdn":"webapi.gtcutc.com","domain":"gtcutc.com","tld":"com"},"ip":{"addr":"104.21.24.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.831Z","timestamp":1782746037831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcutc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 04:10:28 GMT","end":"Fri, 31 Jul 2026 04:10:27 GMT"},"fingerprint":{"sha1":"A4:DA:91:72:3B:69:C6:62:73:10:69:92:D9:68:9A:B7:13:09:FF:0C","sha256":"FD:C3:2E:64:15:DB:C3:CD:CC:93:BA:BC:FA:57:38:94:90:68:81:CD:A7:2D:51:4A:AF:29:DA:70:C8:F9:50:8D"}}},"request":{"raw":"POST /api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE\u0026status=0\u0026pageSize=1\u0026pageNum=1 HTTP/1.1\r\nHost: webapi.gtcutc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nauthorization: \r\nsatoken: \r\nlang: en\r\nlanguage: en\r\nX-Device-Id: d-mqzcykqg-c270aqgt\r\nOrigin: https://gtweeth.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:13:58 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gtweeth.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPaKM5s7W%2FDWomaSWi63NqRuMVV3DdrWDmcoQU%2FnfYFQ6qEGXap9HU1OITKJMp96ilntsYrfGoJsQkXWTjZekXnCwlMZfw%2B%2FtYzFYaCb3QCx5g8ffs9OeZEa1DRQj3skDRZvOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135e0d22f8056b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":563,"size_decoded":1278,"mime_type":"application/json","magic":"JSON text data","md5":"ae957c93bd8c66752c1eefb6e714040a","sha1":"eb3e806b2993b179c40c0e05410ae77619843df5","sha256":"d0b5f80ddaf95537ac4a3b2dbcded3ae0b182cc553cb9a4ad819c1c2780bd21d","sha512":"969991e9d0e42d7b5d38ee5a94887c33ae47370914fe90c050baa52c9f00be39915c00c37b6e119bc9a22ad0947978751c0b5354b03e4180f1fbb7b2e557928a","ssdeep":"","tlshash":"18f08b4f16fcde390c4601c701cd7cc9929e1283d6949e34975bdf2c86f14ba170a944","first_seen":"2026-06-29T15:14:36.393325Z","last_seen":"2026-06-29T18:42:46.51944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/cdn/element-ui/2.15.6/theme-chalk/fonts/element-icons.woff","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:57.850Z","timestamp":1782746037850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/cdn/element-ui/2.15.6/theme-chalk/fonts/element-icons.woff HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/cdn/element-ui/2.15.6/theme-chalk/index.css\r\nCookie: app_device_id=d-mqzcykqg-c270aqgt\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:58 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\netag: \"6a4111fa-6e28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKsaynPbq%2BgbLuTOpncDivWCPOEEX1oq%2BdTPuE%2BJm2rr4CakYe7v%2FEk%2FxjCDe%2BevvN1UwV3gMaFiQ6GeNQ8baIOpQ0Y2o%2Fmw%2Fu4MoHifz9fvBXngurmSNv0Id3g4vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0d09b01723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":28920,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-14T07:25:45.152289Z","times_seen":26709,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtweeth.com/pc/css/chunk-vendors.b57e4bfb.css","fqdn":"gtweeth.com","domain":"gtweeth.com","tld":"com"},"ip":{"addr":"104.21.86.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gtweeth.com/pc/","date":"2026-06-29T15:13:53.251Z","timestamp":1782746033251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtweeth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 05:23:00 GMT","end":"Fri, 25 Sep 2026 06:21:31 GMT"},"fingerprint":{"sha1":"2D:22:68:76:7C:11:08:B1:26:F6:8E:5C:F7:CA:5C:84:93:A2:35:A0","sha256":"DF:1A:BC:86:56:5C:40:E6:40:3E:35:26:1F:2C:0B:5D:B0:ED:B7:04:61:3B:62:45:50:EC:1B:74:56:91:63:E6"}}},"request":{"raw":"GET /pc/css/chunk-vendors.b57e4bfb.css HTTP/1.1\r\nHost: gtweeth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gtweeth.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:13:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jun 2026 12:22:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4111fa-49e\"\r\nexpires: Tue, 30 Jun 2026 03:13:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFrKVi4HjoHfW6n6Lqj%2BcKgsYkt%2BwKGmXO4n974j%2FYa%2FbT3lXnREMC40QHjiY77qT%2FTS77A0OiE0lp7LSH7L57vJ%2BIwl09y456r2ftGTHFUH15VhsRrNeBkWtD0cgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a135e0b3de51723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":1191,"mime_type":"text/css","magic":"ASCII text, with very long lines (1182), with no line terminators","md5":"bfb572ddf961ce1e5d366017ddcf75dc","sha1":"5581fb5a4ba4645e0c7a08788b80c8f9adea0321","sha256":"10092d48c11ed6efd7474aa904ac1d89d6ad919b01efcc718fbb93715a92d87a","sha512":"f088f406fd3511782ff0fc2dbfba3d2adab4e676fafbba20235ffcb845b6bc275cbc08fa588251b3a317ec35a7d7c6d663b05531d89748bdcf6cb75af298795b","ssdeep":"","tlshash":"c221ab32cc900566a2276e07b6ce0a9a03aac602913bc1dd7f557519c386b6c1cdaf8b","first_seen":"2023-06-15T19:02:17Z","last_seen":"2026-07-13T14:12:35.480955Z","times_seen":280,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}