{"report_id":"ed936f9c-31ef-4781-bc2c-ced004669807","version":6,"status":"done","tags":[],"date":"2026-04-06T13:18:49Z","url":{"schema":"http","addr":"h5.gfxxlive.com","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"172.67.159.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"title":"LBMA","dom":{"size":22995,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16148)","md5":"cce8baf51874de0d56e1da91ea41bb82","sha1":"9e58ea17addd071a36937d94c830a75001156470","sha256":"62aa3c6705404f65f4f4044d575fb1d065364ae1412a3f14e2c0c5392e78ce3e","sha512":"de6241315165a7651bb5058d7ca6ad63e65c8a0e4544cc666d422df49668c62cbbbc964329250f9f81418a557657aecc6a81ff67ddf704e68b4867955370e2f3","ssdeep":"384:RdSZCx12m/5aPtQXRtFvXWatFw1lUsmt4REM6ZF7FZV131clE+kGTBW5GOd8oYIS:RUQx12aj0mtWoYIRI","tlshash":"bea21e35795000a713bb99c1e220be1e76d2f30f81068452bbbd859a1fc7db6bbe6471","dom_hash":"domhash02221648acc2feac4710339f428999fb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.gfxxlive.com","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"172.67.159.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T13:18:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":20,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47658,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.883590+0000\",\"flow_id\":219604675146500,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47658,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.340740+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47674,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.956583+0000\",\"flow_id\":1311673124618269,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47674,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.426013+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47680,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.962845+0000\",\"flow_id\":277015503012034,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47680,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.426178+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47684,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.969704+0000\",\"flow_id\":30179437543707,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47684,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.426267+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47706,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.978022+0000\",\"flow_id\":2249599492796233,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47706,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.438089+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47700,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.979650+0000\",\"flow_id\":459470008713575,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47700,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.426343+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":40790,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.994669+0000\",\"flow_id\":942490620775068,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":40790,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":906,\"bytes_toclient\":6401,\"start\":\"2026-04-06T13:18:31.445084+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":45414,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.999591+0000\",\"flow_id\":639128490684306,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":45414,\"dest_ip\":\"47.79.48.185\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"lbma.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:18:31.339858+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":40800,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.014741+0000\",\"flow_id\":1902153818439412,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":40800,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:31.458484+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":40804,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.060737+0000\",\"flow_id\":871529171094793,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":40804,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-04-06T13:18:31.494857+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47714,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.115556+0000\",\"flow_id\":222211720283906,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47714,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.591618+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47756,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.211342+0000\",\"flow_id\":1900453011340574,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47756,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.671006+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47740,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.217769+0000\",\"flow_id\":2012968269593801,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47740,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.670921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47718,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.233096+0000\",\"flow_id\":2198497971878889,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47718,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:31.670697+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47728,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.243030+0000\",\"flow_id\":755663838329953,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47728,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:31.670817+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":40818,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.244778+0000\",\"flow_id\":1881984651997219,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":40818,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:31.700451+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":47772,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.245245+0000\",\"flow_id\":805687322443312,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47772,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:31.687664+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":45428,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.249487+0000\",\"flow_id\":1480826116572441,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":45428,\"dest_ip\":\"47.79.48.185\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"lbma.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:18:31.591129+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":40820,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.276532+0000\",\"flow_id\":52942764242294,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":40820,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-06T13:18:31.718198+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:32Z","timestamp":1775481512,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":40824,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:32.295177+0000\",\"flow_id\":2241722522754679,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":40824,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":906,\"bytes_toclient\":6401,\"start\":\"2026-04-06T13:18:31.745079+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"perpcoin.oss-ap-northeast-2.aliyuncs.com","ip":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-02-27T23:24:20.766281Z","last_seen":"2026-04-06T13:04:16.038604Z","alert_count":0,"request_count":3,"received_data":10502,"sent_data":1381,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"webapi.elbmalive.com","ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-17","domain_rank":0,"first_seen":"2026-02-27T23:24:20.784079Z","last_seen":"2026-04-06T13:04:15.935841Z","alert_count":0,"request_count":25,"received_data":75530,"sent_data":12860,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h5.gfxxlive.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-25","domain_rank":0,"first_seen":"2026-04-06T13:18:54.757424Z","last_seen":"2026-04-06T13:18:54.757424Z","alert_count":0,"request_count":36,"received_data":3660430,"sent_data":16671,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lbma.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-04-06T13:04:15.313262Z","last_seen":"2026-04-06T13:04:15.313262Z","alert_count":0,"request_count":1,"received_data":2378,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"echores.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-11-02T12:34:44.615446Z","last_seen":"2026-04-06T13:04:16.35349Z","alert_count":0,"request_count":9,"received_data":14277,"sent_data":4257,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.gfxxlive.com/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87af3f0ea62b2d9814e0f57c40ba04d8","sha1":"318e157fcc04da4a988b417915da0afc281ad107","sha256":"57138fba899573beb886392045eecc27249420aa6a952e04f47992ac68deba46","sha512":"37da0bfd2aee5f5c3644be1f54786d68d22d5c77fbd53ab603c065628dd92aa6737de84165e157da88b30c387ee51eab8ccea856e7ea206cabee3b9762b441a1","ssdeep":"","tlshash":"3911abfe291a602a6303404e976b7801643250a9000a184277ccde9dbb9abbdd0cfb8c","size":1048,"data":"","first_seen":"2026-04-06T13:04:20.065598Z","last_seen":"2026-04-06T13:51:20.458039Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95e9b9fe4a48a707caf0875eccbb589e","sha1":"ee6903d8a5a929998d0e40d8489491e50b86cc3b","sha256":"4bf52dfa47c901d7749924632ce33d2d65f36a51f36a3caf6bd8aca84e6a0e0a","sha512":"5958d0f5489c64db69bf5b392b14fb0c780865051956a2f453c27f65ff3a7f04006d7a1ba42e20cb8b36787c9f6ade123c0747d1c7a8fa07e0c090ea66a5d3e9","ssdeep":"","tlshash":"bb90045403004450c15331d01dd153503c14500134c5500d53dc01c03d04403dcd0551","size":39,"data":"","first_seen":"2026-02-27T23:24:31.768922Z","last_seen":"2026-04-06T13:51:20.491761Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/vendor-eb88f680.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"93e6de8cbbc1c3bfa6342405523a6f7b","sha1":"6bbf40819fcfda783ded60ba027423651fced963","sha256":"7eb512d7a7e756d927219e74c0534e711bf437d5185f3f37565bf68f0d8ac2d4","sha512":"a2cea3f865229554761f1016e0e33a737512990369d772ee1771361e4459a1bfd5db3648904dd456072007b8d9c1e01e67426de26e0a1b4ae026a0872479053c","ssdeep":"12288:b/4JoiQ754+28vbUw6+wWAcWoqrbR0JUd/WIh/mL0uZRWx9r:b/4Ay58L6+wW/WoglZd/WIh/mL0jR","tlshash":"0b1539c97292f06147ab24e240bb0006f3396e59740e84a4f16dd9db7d7ad89e277f38","size":931293,"data":"","first_seen":"2026-02-27T23:24:31.743909Z","last_seen":"2026-04-06T13:51:20.365074Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-04-07T11:52:46.161443Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-04-07T11:52:46.151543Z","times_seen":2987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-fa7545ff.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c486f065d4d4026e33553aa8dd3445e","sha1":"14663adfc4c17c5ad7863834df5799589d4d9911","sha256":"a5cf0fb952d8ba6def92dbe11deaa9a034ab1d26c2262db8519aded435246f50","sha512":"e7fef816e0744d9170aac60c169b646a2e66ebab75127e037e6041895eafe4c444bbeb96aaf0c45eca6d6ac1be2027cc6f8cbee6655887220d5a87ba9a43bad0","ssdeep":"1536:BNa2v2A3wBDtnrzXghQWUgAhahBStudHR9hbF:e1A3wB2hQWUgAhahBRrbF","tlshash":"afb34c89650a0eff1cfe0994b98b5550306d1f93988ccca3b77b6e4927facd5224a71c","size":112804,"data":"","first_seen":"2026-04-06T13:04:20.033779Z","last_seen":"2026-04-06T13:51:20.343311Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75cb7f06acf415e182c5d292e0dff7bf","sha1":"e74673ad827ed6ee53d1339a8075e55c2308a7e1","sha256":"8fe5af54708e590f593671f7709c46a0bbf79ad1c2dd9f0a7927d42a84f0d530","sha512":"50b19638c5a3e55d436921e1a737f216e2e0a314fb77e55f89eb84cf833aff299d7ea9959586ddec2ded2462921ea1de03b9d2bc320da42ac208832b922d8f6d","ssdeep":"","tlshash":"c6d0a7110c78f4714252f84a0533c599334135d77404f4063ddcd8540fa4bfc0e92d6c","size":252,"data":"","first_seen":"2026-02-27T23:24:31.780135Z","last_seen":"2026-04-06T13:51:20.501092Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4a9d973d1e30085a9546cf6ee49cb488","sha1":"4a80a253e1d2d07b6dede9f69fbd4c2fd3363d20","sha256":"e24c2a1b6b6bdd7e72cf4f795a489b668359a0164e0200e5e6d49fcbb543797a","sha512":"8cb6f53571ce6c05e19a35476bf05b79f1336787b04aeeaf13afa8839dc5584efa86088875fd19d9f6163e6a676accf1a0fa3481475378f6d594b9425b4b4462","ssdeep":"","tlshash":"05c08cc9a0c36d002602641010af38e49024402770881b028ca4d8482e220b08233e98","size":141,"data":"","first_seen":"2023-05-08T19:42:57Z","last_seen":"2026-04-07T23:58:42.209758Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-04-07T11:52:09.016148Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-04-07T11:52:09.013302Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-08T01:35:47.071999Z","times_seen":30127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/filters-57934bea.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a619469c892663d16e52217c541c1a04","sha1":"387cd10ae6c0237a80a131840e635d8f82577a3c","sha256":"a6b8b67653ef725392bc0090c0297dbacf6851f23046eeded378a5adeb76a6e5","sha512":"83bda9bd9964979c5c31ec6db2a3a38ac20e3326b70e404813fb1dbed69dc7cf2c022993e33aa329911f25029fb63124cf365dbb1434834ff5ab276d2aa620b3","ssdeep":"","tlshash":"ab5124fdfcd7613356ee6ef941288454728eae20686e0a4df54bd0455933888e07f768","size":3102,"data":"","first_seen":"2026-04-06T13:04:20.018757Z","last_seen":"2026-04-06T13:51:20.335356Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ca3441268092f5f3296cbc45c9be4124","sha1":"0348b172ebfe7aa5e649e4b31851f332677e931b","sha256":"3f6acc164a5d0712e643ce2f47cef3052906a5d16a7cf7fa4ca21e2586aa63f9","sha512":"2145bb9c3d1285de751bb3ea1b899569192793bc0b0f1e0a15b4c79d43fd7880005341ca82f25db4905b17d1f212c49794684f356fdbf0acde101baf05fe7d1a","ssdeep":"","tlshash":"5bc08cc4a0c23d201a02641010bf24e49028842770481b028d94d8582e220b08233e98","size":137,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-04-06T18:33:03.805198Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/en-ee0598f1.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"909fc2f10a61e1389a9f595c223a1283","sha1":"fda5d74a74b93193e6cdb4c9996ffbed478957ea","sha256":"c8c530ae968dcf0018fb7c207507a9342518421344cdd4a346341de273500e9c","sha512":"5816141166ec20e1126e78d9df95e3f4fbd9c3e877e83acd8fac2a1ca67810cc49b5ec57c55785af59c59a42f66468ff528f2bba25b06f768f7b4c4c8cb353cb","ssdeep":"768:5CA4tZcEw/o7rKOdAFsifnAMC2rAaAMR6VoP6+6sPG9w1mwO6fpk7aOLxO:5CSponKOdebE2rdUVLsPWwqLxO","tlshash":"3d13f7893e1a989a04f3536774ce2e1160f60ac18255881f4fecc9fd53e2b67a367b34","size":42102,"data":"","first_seen":"2026-02-27T23:24:31.734965Z","last_seen":"2026-04-06T13:51:20.371548Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/config.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67ff8a6aea8b026a686a55acabdaa518","sha1":"4a15b427024362562506bc25e32ff4366f62039f","sha256":"3199afa5d09d297658323a19b1ec939756856b700c9bb6aeb46687aa505ebfc1","sha512":"969bedd269b1bad6dac4746692b67c3a0ad79ddd36c1db6dc79e3f1f1d25ae9a8575d9f7f7b2c15b9d5070a7020ba60c19350dec7073a7a24252bc8869b2cb6d","ssdeep":"","tlshash":"16b0923d7b66090226a302806a7b774ca2d0e43dc8488c44c2929842a8464a3f0a68ac","size":119,"data":"","first_seen":"2026-02-27T23:24:31.722069Z","last_seen":"2026-04-06T13:51:20.345416Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-bf4d5967.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb207d8fb848b9b1d3c9e4e6b4298681","sha1":"31c1667c9b8ceef8ebb64ec27be92dc1f3a8fb42","sha256":"3a25b890f053f9407bd2c192760880dd0ad9a5a5f57b1a78a32841ab6e088a18","sha512":"fc1eed0d7fce6fb42d77347aba7108fe08df1b60a5a3f8e6f1c96247f3121f21c0809d6ccac36dc568bc955d0ff3d10dc5bd0d72f0fc0afb40cd98c77280ac5c","ssdeep":"384:RHCKOobN0qbi3/PfPnHdl2ZFjJZQnPDfqoATZss+4p4JeJ36WoSebhdlcYCLiI:05Rwc3XL27nwDfqB2VVhdlcYCLl","tlshash":"8c62e8aaf5079a3df2bff05140880050b62d7fea5009c8f1b9bcad466752ee8b395719","size":14793,"data":"","first_seen":"2026-04-06T13:04:20.032489Z","last_seen":"2026-04-06T13:51:20.386868Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-04-07T11:52:09.014316Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-04-07T11:52:09.011074Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-08T01:35:12.56374Z","times_seen":4511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-04-07T11:52:46.15494Z","times_seen":565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-1cbc66ab.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ef47732d9a3b23b2df705bf99004bd8e","sha1":"b3f5485a08e2b55394ff7d0b9a7e28b62031f0ff","sha256":"c856cb58e112026bd37495a4599a5d51026fdee8020dedd9d36d61129f427516","sha512":"466992c359743440ba217f8a4563f19510cad057a5745338c08c3b3869b1be0ff6a09b5d262f7d4d7d5bcd9cfdf049ff902326a92e95620fba85d2cb8a759764","ssdeep":"96:c2LYsH+P9YBqD+wMALTcT/3b+JcQ9Su3tKZ3hvK+3YmUeAIM8jx:c2LYsH+1YBqiwZU/3bMe5hv5keAMx","tlshash":"de91b78cf8028a7d9ab7985048580421359c3bf6b10848f1f6be9d5e63b8a7ae791725","size":4618,"data":"","first_seen":"2026-04-06T13:04:20.011595Z","last_seen":"2026-04-06T13:51:20.373201Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-04-07T11:52:09.00541Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-07T11:52:09.028476Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-c8685e2f.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6501efe5b6257c064df86dc83764acc3","sha1":"7ccfa4c5c1c693c133cbfe05dd90d9ac498401ca","sha256":"9a1166a4d04c57a14bd4583435aae7fc38b281cb0c9ddc1d78f5ebd98d75c150","sha512":"a5a16c46bddc294b62b91dc88607b2773372f3df43759c90d51c1cff26713c088311f42666fd526eeef21b1787d43caa28a1f54aba5fe01e59cbd52e843a0a5d","ssdeep":"","tlshash":"6d01fdf8fc0c8ebb0ea20a400290360014091fddfa1419f198867d661be4940d7de32e","size":776,"data":"","first_seen":"2026-02-27T23:24:31.6241Z","last_seen":"2026-04-06T13:51:20.376273Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-07T11:52:46.157686Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-07T11:52:09.021327Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-04-07T11:52:46.161956Z","times_seen":929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/charting_library/charting_library.min.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-07T11:52:08.976668Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-9d36bf28.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f5b8dc34f4cb809f12a5b70fa7fcd8f9","sha1":"ffe9cb814a67e8bb349a20fc7af82346aa7228ee","sha256":"ccdd64755c50e718dfcaca6bfbd97209a5520f9bfc2ebaa5ca01d5a9689ed28f","sha512":"635afbcce4843fbf84785a2567e5f6df39d4f53d62ff7360a6ebc5e8c98f52fa8052a28691a98e67e3ed2f1d0662ca45f9718ec70b521f7d976231b53114964c","ssdeep":"","tlshash":"dff00e7f7d6a80b21bf788e8a2631820b61c1f4a3754c4e4d4870e10db388e7d12e218","size":510,"data":"","first_seen":"2026-04-06T13:04:20.052382Z","last_seen":"2026-04-06T13:51:20.394298Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-04-07T11:52:09.025059Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-04-08T00:11:23.200034Z","times_seen":655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-08T01:25:36.29171Z","times_seen":33908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-07T11:52:09.00792Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6c4b63197790d25a07f25a43bd99b082","sha1":"9cf651883e08001a9ec271a0c3c2d4ba8cbfda2d","sha256":"cab5094ca7bb9e74a1d0753500ab633f54ee468f574b0c71293e95e0eeb863b6","sha512":"019ba7e344e3b8e2fb0b9b422fc54931b8f5650f519c8532a13b38b604c7761110390b28f6531300602e1e130ef426834d9ce94baa0654db26da7edfbba9b19e","ssdeep":"","tlshash":"5dc08cc4a0c23d101a02641020ef24e8a024806a70881b028c94d8482e230f08233ed8","size":140,"data":"","first_seen":"2023-06-19T06:03:31Z","last_seen":"2026-04-07T17:40:36.870949Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-04-07T11:52:09.022346Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/#/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-04-07T11:52:46.156024Z","times_seen":693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/currencyItem-a1c29b29.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d606b704cfd63cf18de83c32651a3067","sha1":"7c47aabdf35c96ee849c3ea6f372aacd9cd102ab","sha256":"bb4ae26269807983deb56d849a88ce4e659b0c70ea5e83fa00a9de7c41aa7840","sha512":"8c3955048459618032252e56af18372fa63e4f76bba34e521c30f0690423de7863f3498e0183821d5f07263a12ef061b71af0e2b082918635bac9b55b20a2352","ssdeep":"","tlshash":"a421ca9aaa01c7b1cbbe91a2c5bd0414120d7bda700185c1ebed148a3b9a5fcd728a31","size":1206,"data":"","first_seen":"2026-04-06T13:04:20.047228Z","last_seen":"2026-04-06T13:51:20.395115Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xpdusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpdusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e81b1620634ef6ebe02978bde003eb33; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDx4mrrE3q%2FR3%2BQYq6J2VTSaCitbn9cGyQuk2ugybLnUvl%2FKqQJd3wKJsOEkw%2FCc9NagYOJRAdBHLNva%2F6wJzAYewL4VElOxQYI0KZgWujbPnssRPN%2FmPurcKguBNVDsMBBOgbZ%2Bbw%3D%3D\"}]}\r\ncf-ray: 9e8114341e415a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d6034532c04672e489df36015210e335","sha1":"1b6c036ebc57cee794e345b19559eba4898cd17a","sha256":"e44b29595bc7ebddb82c49306989c8bc6f3af394bf376fcf5d18405afc8f42ca","sha512":"6698f3297a8bbb698a6799ef42374becfaa4124ac62a7fc0c0b87dcb002b5745aa75c34261603c4869ada1e037590f20cbec4cb23ee17a0ecfc10b9b52695569","ssdeep":"","tlshash":"1e9002565d1d8a42a8c300b5e50a3208012431602a64d2485d59522580c81a22144c99","first_seen":"2026-04-06T13:18:59.289816Z","last_seen":"2026-04-06T13:18:59.289816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/resource/svg/light/mengbanzu12.svg?2.0.1774953446696","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5m004K98OS%2B2gaJFZNX%2FceJlEOggLmK2ilYoSB8kuAURJNntJ2JTbg%2F%2B1W1NaUsL%2FauIZLD5vEuMzuGfpZNR%2FRk06y7uTwb%2FLtXqc0FmsrNEbsOHdyCuRjci9JgEvUfASQ%3D\"}]}\r\netag: W/\"6542f5dc-322\"\r\ncontent-encoding: br\r\ncf-ray: 9e811435ebfe0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-06T13:51:48.59313Z","times_seen":224,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getAllSetting","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02GUtKhZ6UJc6YeX1LEFeEYFtNZ48qO8OPySRuySpWjwsON3vXuP5ujPQVDlmXErQk%2B%2FVP02nOmMbxZ%2FNsL2mtsd8poXzFv2eE2wqIz8vkKxxUiA3yEZiM9bMvBc%2FwVsTnqTUppDwA%3D%3D\"}]}\r\ncf-ray: 9e81142fd983783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13835,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47f102e82a69b42862d2bec4c55d840c","sha1":"a72cb0a954bcd105301b570b46644a9dd7f8e5b2","sha256":"a1ddba3114166f494729b1c99e4d58c79fe8e0069d887372127aee16edb01850","sha512":"397a3437cc15630121ce7340c41743976e531e5416abe3c541d931278ca2f3b2a5da6bed026f844a45f35c82a8deb7e999718301c040bffdb660ad2dbf3b7148","ssdeep":"192:NLcnGtOFgQ/fnFlIqIc2hsSH/VU5pLMAFJXyoqEGAs2suEsjqv5MNiQYQhnX7i1W:rKxg205MQQYa86sYcDn8","tlshash":"7b52564a37d8ccbc46d62ed5d0ab7a8abddc346be584dc55e4a7ef1c88499b2440f00e","first_seen":"2026-04-06T13:04:20.014718Z","last_seen":"2026-04-06T13:51:20.354722Z","times_seen":10,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/platform/dev/favicon.ico?2.0.1774953446696","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1774953446696 HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrD7mIzFEjpYlqSCUGXrvMmb1Q0w7WKVdgA9oLJSo5aq%2F9yGi6HdExMsLiUhKdPGLiWOKrownNdlIqwrnaYHdWMAvqlWdHUlUYnd8Gx%2BD0VnTGk%2B2iyYHszvKZv8rtnGiRA%3D\"}]}\r\netag: W/\"6542f5da-10be\"\r\ncontent-encoding: br\r\ncf-ray: 9e811431d83e0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-04-06T13:51:20.383205Z","times_seen":65,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xagusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xagusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9j3uRF1GvekJOdIZhKAyY5imxUFjFKHv5Ny8hFltpKz%2B%2F2CR%2BbY4LB0Tp94ucW7eOy83JzxAcM4jZ9HecPv5eV2qu37uReR36ZX%2BBGoincpBvVUlaDYAa%2BhRYehWoJyNw4ovKXhow%3D%3D\"}]}\r\ncf-ray: 9e8114321f9f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/resource/svg/light/mengbanzu13.svg?2.0.1774953446696","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6542f5dc-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvjf91sHRNkoxVWOY%2BGX6QWA0IMYXa7YeyxmIzsqPRSlQp%2Br0meaHpoLA5Fd3daQX0d6WoF6hD4OWJ0Yxn5nDb2%2Fcfb89q6%2BaWRj%2F5aGrdV3Rz8zjVcdILUl5cH0fMp7f10%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811435ec060b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-04-06T13:51:48.542536Z","times_seen":202,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/resource/svg/light/zu447.svg?2.0.1774953446696","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wy9IfRjgg0qk4cKpPxcfZGq3hbckAitg958%2FDVENiX0v5%2BWvqyRvyeyuY%2FhvNNyDr7OWGxrQPLDKSlpAs1ohPIiVoJRJFtW%2BlkFiGXLj%2FuQA6FTBC1Hmg48QXDLc2TAuXhQ%3D\"}]}\r\netag: W/\"6542f5dc-1a4\"\r\ncontent-encoding: br\r\ncf-ray: 9e811435fc0c0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-04-06T13:51:48.565472Z","times_seen":260,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getAllSetting","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e81b1620634ef6ebe02978bde003eb33; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2AuaxWXwME0N6%2BfT70HFsfOGwrNyz%2FSAailHA0y71Xwr4XbLq6%2BNyZMNegCXilBg7ry%2Bymvwcd3rgqZoMWZ8OJRIVwR%2Bw%2BsJh1zdP74CpCtW7I2dr2UY0VPUfHBh1RojalkI0Npug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811436ae7a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/type/defi_activity_type","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uy%2BdOuaaQFYk8eNAf0ZfWVK1xICQnRbcHRpNPX%2BBvHazamjAZdlWb1SVvGg%2FOsBeBKwZrrX%2BlzD8t%2BVs%2Bt7gR3tzB4Q65oHLA9UGjzV999I4V0tYTgaaPUukS14%2BXc5aPqOk%2F69KAQ%3D%3D\"}]}\r\ncf-ray: 9e8114392ebe5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-04-07T11:52:08.934144Z","times_seen":476,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-c8685e2f.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-c8685e2f.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=b02d6c9c997296e3b70134e942dfcac6; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtTtE2GWWTx5fq1oMQIfqMVV0aSvgC2KnWBno20q86qwaKCKsFhj%2BN9zofHrJl1jTfo4rOsxlfEAglYtyA0MvdCyGKki1M2prUW8M5%2BX1EPJDvWRicBGo9T3TTUzNGNeUXc%3D\"}]}\r\netag: W/\"69cc4ca6-308\"\r\ncontent-encoding: br\r\ncf-ray: 9e81142c6b070b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"6501efe5b6257c064df86dc83764acc3","sha1":"7ccfa4c5c1c693c133cbfe05dd90d9ac498401ca","sha256":"9a1166a4d04c57a14bd4583435aae7fc38b281cb0c9ddc1d78f5ebd98d75c150","sha512":"a5a16c46bddc294b62b91dc88607b2773372f3df43759c90d51c1cff26713c088311f42666fd526eeef21b1787d43caa28a1f54aba5fe01e59cbd52e843a0a5d","ssdeep":"","tlshash":"6d01fdf8fc0c8ebb0ea20a400290360014091fddfa1419f198867d661be4940d7de32e","first_seen":"2026-02-27T23:24:31.6241Z","last_seen":"2026-04-06T13:51:20.376273Z","times_seen":12,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lbma.oss-ap-southeast-1.aliyuncs.com/file/3f0eec83-458c-41bb-b0e1-c8da6682d9c1.png?2.0.1774953446696","fqdn":"lbma.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /file/3f0eec83-458c-41bb-b0e1-c8da6682d9c1.png?2.0.1774953446696 HTTP/1.1\r\nHost: lbma.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 1830\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A85767583530273207\r\nAccept-Ranges: bytes\r\nETag: \"4B3EF8C62B99A5C2073E57DCFBFACF29\"\r\nLast-Modified: Tue, 10 Mar 2026 14:23:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3598652782778033866\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Sz74xiuZpcIHPlfc+/rPKQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"4b3ef8c62b99a5c2073e57dcfbfacf29","sha1":"edb4b395b6adc8d884777339788e59f75da00d08","sha256":"ddd504d154b598383eb31999c85e0d678ee28004f2db2138fe4731db99daa6dd","sha512":"f4d13b854ae3139a998768426be833c8149851ce1227b120abcf87fc75d41bd75015554677cdddec9683d4a4e78d683973d3be2e7eb561b353890eb5bc3bbc7d","ssdeep":"","tlshash":"6231d50aea40bac1538d850270fb41675e6314888ee8f579a88fc12c3c353bf55998df","first_seen":"2024-12-08T15:39:09.749558Z","last_seen":"2026-04-07T11:52:08.960698Z","times_seen":97,"resource_available":false,"data":null}},"time_used":2306,"timings":{"blocked":988,"dns":0,"connect":327,"send":0,"wait":329,"receive":0,"ssl":659},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnjWOQSGL3A6fbs2cP8iPteCDoyFznAalAlONjKCN%2BVuQy7I9rd%2FEZN1SHhzBFBfSsRo%2FEPidODJnNFT%2Fh9aVuH53M2ZAgkCJYowqnTbqM9rUaQpqPneuUJwyBP8v254hinielrOcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e8114369e795a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/vendor-eb88f680.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/vendor-eb88f680.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-e35dd\"\r\nexpires: Tue, 07 Apr 2026 01:18:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DP0q3NY0dPPygkEO8MFXGMwxeWXp3iS8rpgMPY1aLoz9l%2BsOsKyCbPQkPIWZNwKmR59i2LeQPF7DVR%2BDZBiN40TQVxt2CCEfl5mrp5hd8PUnWyY5rGc6AiWMYeAtHUlnYec%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142bfa9f0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":931293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"93e6de8cbbc1c3bfa6342405523a6f7b","sha1":"6bbf40819fcfda783ded60ba027423651fced963","sha256":"7eb512d7a7e756d927219e74c0534e711bf437d5185f3f37565bf68f0d8ac2d4","sha512":"a2cea3f865229554761f1016e0e33a737512990369d772ee1771361e4459a1bfd5db3648904dd456072007b8d9c1e01e67426de26e0a1b4ae026a0872479053c","ssdeep":"12288:b/4JoiQ754+28vbUw6+wWAcWoqrbR0JUd/WIh/mL0uZRWx9r:b/4Ay58L6+wW/WoglZd/WIh/mL0jR","tlshash":"0b1539c97292f06147ab24e240bb0006f3396e59740e84a4f16dd9db7d7ad89e277f38","first_seen":"2026-02-27T23:24:31.743909Z","last_seen":"2026-04-06T13:51:20.365074Z","times_seen":12,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/platform/dev/config.js?1775481509772","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /platform/dev/config.js?1775481509772 HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WByLmfMeYUV%2BaNaODFpi8%2FI4tGEgey27Qn%2BeKfeJRnJIJwQ0DjHw53hM%2FwmxRIOg0YMUQC5YHci7F02LE%2BbLKrGMoIxHFLvy3VenWxOzQ22igpekybEYWcHCCQ6uFj9lois%3D\"}]}\r\netag: W/\"6542f5da-18a\"\r\ncontent-encoding: br\r\ncf-ray: 9e81142c3acb0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-07T11:52:08.927785Z","times_seen":257,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getCoinList","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIXSfYyArzMByMdqkHu3vZ5IJ3tDw%2Bn3tt%2BHQA6E3ZzWRJvA79E1oTy2EtyNf6xINlbT%2B5wXrsdTzXPOTl1y%2FKMSWrmvIP%2FOGiRU3j%2BWRyt4h9ELB0bbOWqHoxq1tFYQgaqqh6HWlw%3D%3D\"}]}\r\ncf-ray: 9e81142c884d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":39,"dns":3,"connect":3,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/filters-57934bea.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/filters-57934bea.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-c1e\"\r\nset-cookie: server_name_session=c30e9ff0fffd368365799e2c4f184ac4; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGwkvtu%2F9RC2PydHO9KDXwbFm0eFJhZJkC5dS7z9vgI%2Fqg06Z4Xxmk48PM7Zck68W3xS2GRQp0hqeMCv98BTCMO6jXrZ5go%2FJWym9n1aW%2BmIGvxDSpoxFzmvs0VX7PMg618%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142c6b0a0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"a619469c892663d16e52217c541c1a04","sha1":"387cd10ae6c0237a80a131840e635d8f82577a3c","sha256":"a6b8b67653ef725392bc0090c0297dbacf6851f23046eeded378a5adeb76a6e5","sha512":"83bda9bd9964979c5c31ec6db2a3a38ac20e3326b70e404813fb1dbed69dc7cf2c022993e33aa329911f25029fb63124cf365dbb1434834ff5ab276d2aa620b3","ssdeep":"","tlshash":"ab5124fdfcd7613356ee6ef941288454728eae20686e0a4df54bd0455933888e07f768","first_seen":"2026-04-06T13:04:20.018757Z","last_seen":"2026-04-06T13:51:20.335356Z","times_seen":10,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-bf4d5967.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-bf4d5967.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-39c9\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p60b0HOXmmxD%2BBlvUwhzB8KehaPP%2F4IkWx0Y8v8FaeHMKBp6TKwvWEJNPm52RB9Z9KXMsXDjH%2B4yNGonnxyrfBFKsggfTNv%2F9x2qFKu%2FXYSzbChKrsI4wWQ4n5v5vprENtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e8114300e640b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14793,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14792)","md5":"eb207d8fb848b9b1d3c9e4e6b4298681","sha1":"31c1667c9b8ceef8ebb64ec27be92dc1f3a8fb42","sha256":"3a25b890f053f9407bd2c192760880dd0ad9a5a5f57b1a78a32841ab6e088a18","sha512":"fc1eed0d7fce6fb42d77347aba7108fe08df1b60a5a3f8e6f1c96247f3121f21c0809d6ccac36dc568bc955d0ff3d10dc5bd0d72f0fc0afb40cd98c77280ac5c","ssdeep":"384:RHCKOobN0qbi3/PfPnHdl2ZFjJZQnPDfqoATZss+4p4JeJ36WoSebhdlcYCLiI:05Rwc3XL27nwDfqB2VVhdlcYCLl","tlshash":"8c62e8aaf5079a3df2bff05140880050b62d7fea5009c8f1b9bcad466752ee8b395719","first_seen":"2026-04-06T13:04:20.032489Z","last_seen":"2026-04-06T13:51:20.386868Z","times_seen":10,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFj80NgL%2FetOCxCLGAHrA%2FT4i0MjEtTeY4UwonpXBZsZPs8qlMxHY8xUjTnCAli%2BFcO7XW0z38r9RnMyOPA0fIjuOEDf8Y9y5vkIuTVZPhrpQvUUoEpIaYEaFj0zM99j9VFBOhzpdw%3D%3D\"}]}\r\ncf-ray: 9e811433ee3a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e85c5287d08670fa5fd1c7b38657706c","sha1":"1110d8e7b74af7a6e96fe04550aa71a1c1ac51fa","sha256":"69dc4c33ce7a7aad4d8a545bb7bef3cb0071a6da259569da2275e23faa95e11e","sha512":"d3cb9d2200b3fd7add175ccf05aa013a1cc084a05f303b177b7732bb8fad9289c27947d48bff7012b20711992570a538e5d11c3e20bb1dde77d619fddac91d8a","ssdeep":"","tlshash":"489002559d5c9282acc300b5950a120800243160266692484c59912a80881b27044898","first_seen":"2026-04-06T13:18:59.299975Z","last_seen":"2026-04-06T13:18:59.299975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T13:18:26.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=bae20cae3ce70550805d3a9a61092553; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtYyoir8At2eEVMOahtFJFL009wnpn2f37SeTP3z2%2BnyQ6jCyvQn8X3sGFUbTthuw284Yi%2FkS9hBVRgZXR3yIF5UDTCrYJRxwkLwZMXdowkTjmPGPUIj9RygoBQRqOBX4EE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e8114185db456a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5669,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"da2a9ec5a0a7b626f97e865ed09b8fd4","sha1":"987c5e5408615355d444c817604efb03b606d0e5","sha256":"afb65254d0ab65e1b0f9940ce0f4dfda4083b21477ae721a49af98bfd8d6caae","sha512":"5ecfcddef295b567b78914d5b33be5f32b914b15666bff0d13bee17a1733e2c75d6ac8b11a718aff682757c9bed140c8d99c48bbe54538cff23e993961a74d09","ssdeep":"96:+r82hOf5muSPEBimgt/gdr6TCZydHRH/gn2mUsGKAiowGqPuB1niHU2iHxH/2:+FcWPEQ6ZCxfa2nfD3bQuB1ni02iRf2","tlshash":"efc152b36ca0c81a2371052b9ae7f01ceb601193951a9854b4cc94ee9ff1fe588dbb25","first_seen":"2026-04-06T13:04:20.038603Z","last_seen":"2026-04-06T13:35:46.004958Z","times_seen":9,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":46,"dns":27,"connect":1,"send":0,"wait":290,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/currencyItem-a1c29b29.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/currencyItem-a1c29b29.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-4b6\"\r\nset-cookie: server_name_session=04f911c24348bc8a62224728d8fd7b90; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIYWT7o80tccTSm1aDFt0iKl%2F65e3esaUBZ0dDiBsGn9HcT%2BcsdAgXOk2cvbvSI%2Fp2sFWeRbvU6A92E6E%2BZxDKvgWGhcO8k8fW5YFHplVzjDkH%2BZXQuLZN%2FPtpSRsjGq40Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142c6b0c0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"d606b704cfd63cf18de83c32651a3067","sha1":"7c47aabdf35c96ee849c3ea6f372aacd9cd102ab","sha256":"bb4ae26269807983deb56d849a88ce4e659b0c70ea5e83fa00a9de7c41aa7840","sha512":"8c3955048459618032252e56af18372fa63e4f76bba34e521c30f0690423de7863f3498e0183821d5f07263a12ef061b71af0e2b082918635bac9b55b20a2352","ssdeep":"","tlshash":"a421ca9aaa01c7b1cbbe91a2c5bd0414120d7bda700185c1ebed148a3b9a5fcd728a31","first_seen":"2026-04-06T13:04:20.047228Z","last_seen":"2026-04-06T13:51:20.395115Z","times_seen":10,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xptusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xptusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e81b1620634ef6ebe02978bde003eb33; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Ivb%2Brw9Z2KiJ1c1nO1aEFK%2F7w7Q0rbs9LIoDnjhCFUDClzOrKk0bSaPrNfgwBxozApMKKwRfune9EC5xBwLxmfVIeihMh6TNYS7KsxGSWdRhdjm7%2BbqFDB93BMSs8wZw3D6CvJutA%3D%3D\"}]}\r\ncf-ray: 9e8114321f90783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xaueur","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xaueur HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e81b1620634ef6ebe02978bde003eb33; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57xZ65LVSgst0Y6OS0q6Vva7Ixu%2FmygDAgoXXCSzjMJRai2TUn8o1fgVnuWI6LVRcsn%2F%2B%2BJVkEX0teQeKHkkow2NsU70H9uOi%2BZkIxMzLc6S%2BvCseWQ1wvHU5gPkJsuFqvsolPfp2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e8114322e0e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-1b3bf7ae.css","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:27.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-1b3bf7ae.css HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-4b2d5\"\r\nexpires: Tue, 07 Apr 2026 01:18:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6x5Cp9pZbdlPShxVpm43hZvinfuuUuExE2uU%2FwnMIuD2jOHakjUPuvNuyjBJT2a34o%2F%2BhwM8Xe9R1mFrCeq8MhC6RxuevD2lsoaLQgi86kim1v3%2FX9%2BHCvhnsiD3C6ouxw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81141b5cbb0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307925,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"a8317930929e5bdf333a81fc4724944d","sha1":"f22e6a931fab3103200d377b2b1538b8dfff0cb4","sha256":"1b3bf7aef877cf68e2d112bc314e297f349b8413dd94d6daa23e01df0e2ccf24","sha512":"5d163ef41d1a5a781ee5e8a8e6b170095cea146246a2772027ceeddc686f9493728e5ea543b165b1a0e0e01e5dfdf907ce9ff54b01c63c2acbe6d6389371a87e","ssdeep":"6144:nz/xsaz9sKWkZ8w71ZACkFDS3vyf58rBeV05TyN:z/1WKjZ8w71ZACkFDS3vyf58rBeV05T0","tlshash":"1f64d7a9a59011bc6f27aa759bce4ad8f23ce5719c018de9f201200a4fc7ff91367617","first_seen":"2026-04-06T13:04:20.03626Z","last_seen":"2026-04-06T13:51:20.446186Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":546,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-bc011be9.css","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=salncOMjlsMTL4a0FuDHykEIxU74m%2FRJzTJVubhb1UUPIZfwEy3b6pUvrTOWcQXSMpetjG0WBvhyeL4jpZdoGHiVh38tmmgkJLC02jK2pJk1YvuJrzJY4Xs1Y3R1ebxZ1ew%3D\"}]}\r\netag: W/\"69cc4ca6-18d\"\r\ncontent-encoding: br\r\ncf-ray: 9e81142c6af30b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-07T11:52:08.980778Z","times_seen":365,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-1cbc66ab.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-1cbc66ab.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-120a\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgkMXYa6tXRWtCeCdhjwT87e66rDJZ5rfdwk5X3siyDmpWa8ysAAXWyj9MRCS9WHeySzg1TJ4XUcQJkeHxCXe0tiss9fjaGjS%2FtTa08hFiQ%2FrVzONTrzgow%2Bp15nkriEpEU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811432089a0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4618,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4615)","md5":"ef47732d9a3b23b2df705bf99004bd8e","sha1":"b3f5485a08e2b55394ff7d0b9a7e28b62031f0ff","sha256":"c856cb58e112026bd37495a4599a5d51026fdee8020dedd9d36d61129f427516","sha512":"466992c359743440ba217f8a4563f19510cad057a5745338c08c3b3869b1be0ff6a09b5d262f7d4d7d5bcd9cfdf049ff902326a92e95620fba85d2cb8a759764","ssdeep":"96:c2LYsH+P9YBqD+wMALTcT/3b+JcQ9Su3tKZ3hvK+3YmUeAIM8jx:c2LYsH+1YBqiwZU/3bMe5hv5keAMx","tlshash":"de91b78cf8028a7d9ab7985048580421359c3bf6b10848f1f6be9d5e63b8a7ae791725","first_seen":"2026-04-06T13:04:20.011595Z","last_seen":"2026-04-06T13:51:20.373201Z","times_seen":10,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xageur","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xageur HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcx5G1gZJuC5fsc6MtfvnCYv5L0%2BdgV0leFKTIjByMgtZaX6WJPqcO7OJyLGNGUm3f6mVnRxuZlwaoYdYPi9EFGcwOqCeDeejUjSAIPmQaRLNPAsORNMnpgE5MuhQMqopbgH9sukOg%3D%3D\"}]}\r\ncf-ray: 9e811433ce385a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bf072f241a97ad9f2228d07c0f338474","sha1":"ad82ce04402996e2fcdf4c1b709985e3fad0bd6e","sha256":"57bc0017d2befe8acf7820dd2c609695dd8b98af246b8efa14e35e8ef75037a5","sha512":"c68027beb2e4c210faeb02d1213fd244f4eaa4bebe57a5f28af9f0d0bd0ae03dbfa4beca4a880e4c41b2777cbc70ec7640fd646428aefd9cbeb6002d7fcedc18","ssdeep":"","tlshash":"e39002595e1c8242a8c304a5960a1204003431602a6692484c59922680881a2204889d","first_seen":"2026-04-06T13:18:59.303668Z","last_seen":"2026-04-06T13:18:59.303668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0bdef91be9d254935b506aaf656f8f619.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0bdef91be9d254935b506aaf656f8f619.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 499\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A8CE63A8313666947A\r\nAccept-Ranges: bytes\r\nETag: \"758505DEC73355A50FA0EA7479FA0223\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8231209139480566513\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dYUF3sczVaUPoOp0efoCIw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"758505dec73355a50fa0ea7479fa0223","sha1":"f625f75d14059f9ca2f10573bb2c8634c6dc0b8e","sha256":"9ba4907adb5327ca635f6187be09172b1598fcfc0e96b62fb9736d9b17ac23d9","sha512":"de61b7e447da38fb2dad09bafceb7749b71e7fcd5cfa1e1d595c79bbb59e48c630c15c57c88d5154b3fdd22364d12d5fc6569173fedfb98fedbef50ae5191ac1","ssdeep":"","tlshash":"3ff054ed83a4ec7cf60bc3608f20e828c630b96b348d0c16256eb6309b4d09c2db11f6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.348508Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1376,"timings":{"blocked":1095,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/resource/fonts/DINOT-Medium.otf","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gfxxlive.com/assets/index-1b3bf7ae.css\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6542f5da-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJ7ykEcIdCuif4gwGOGh%2FjCFmgJK8L6s2Hw%2BHzfGd91bhXwopEhT53%2FYFv5nd82r26zTGsXn1ukB2ygcLyvxrE5GckqDRRcb160i3jEVSkwAO6tjhHxtpywaEk0pAKK06OM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e8114366c820b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-04-07T11:52:46.143789Z","times_seen":598,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":563,"receive":578,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzO41whRRCtTiX5jBg7IsonJbzY1P4YfMIqQzmlbxMUjnQl3EJXWvjSsIbJz4WwJtRq5NWdb%2FJcx%2FHvpKSnQQzMDH9PTq0OwDPoESLTycUJAYEglp3GZ16Xw1UFFBisdyOJsRRaxlg%3D%3D\"}]}\r\ncf-ray: 9e811438deb05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"de0790ebd7ff1b3eb3e9ac868647b193","sha1":"5661d17110966481f4699d5505fb1631b364c19c","sha256":"86d5eb8782c3ddcb907d82ed56535d92448033aada118c8ccba88c817c0ac0d3","sha512":"27d0bafa141eb2bbb2fe419ab41ac7fd2e969c3e84e71471eaf43a84047633b7ab39b7e055e4b2e0d74e86f53cc466c2e31bf4d329106bdec4d6b18d31896945","ssdeep":"","tlshash":"23f0595f19bcaeba08044cd764cdbcc9565f2657d7a0cd30a56acf2c81f09b72b06604","first_seen":"2026-02-27T23:24:31.658027Z","last_seen":"2026-04-06T13:51:20.45385Z","times_seen":12,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/vendor-4b39a398.css","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:27.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-16c35\"\r\nexpires: Tue, 07 Apr 2026 01:18:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPz95tDBRZhGL5P93IVaukHBDnVj8LlhQa3ErGYoFv9KlQcPXr6AGeq2s4XjOTJdkTXELXbpCyo%2FXlltXT0ejxodmgqNVtnwFWtmNgWPqkWkztkZ7mpRY8qblkEi5IKsA6k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81141b5cb90b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93237,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-04-06T13:52:42.012666Z","times_seen":121,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getCoinList","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tBWAaX29wR69aV6g2pcI7RpMANMjbhE18X8grSfJsvsZ7E8xaP94Z0A%2BBhla2V8opxBV6BhKRMJW4kwZDmyGoWSBM7ZXd8QnWPZ2Nur3ewxwHQfrLIynWzzb3Yzmgb4UJ%2FlfuQRQcw%3D%3D\"}]}\r\ncf-ray: 9e81142fe9b7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20653,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (20637), with no line terminators","md5":"07540b21db5ec60a4ff5d7718fbf9ec6","sha1":"d95b283410973bf34f9e46a5b0fb355f4871339e","sha256":"54cb2c6facc0dbeb8333faf325b6dcfd7c2dac3d9d44f34c510741ec79346f00","sha512":"ca5e90407876d6c2823dfcc5bd390a31dc813d17e27fe0fcaf6d6b0bec275f777b332aa8efca24a825bd302d4b6761f9830b0db5f1f1c0b07130e336f53b1da2","ssdeep":"192:Fge2XP9ge9XxSgeTXa+XTagerXFPgerXWhge7X6bgeHXKBpfge7X9IYJdSIguuwI:Jyp1n","tlshash":"d9924055513c90bdc63991e12eef7e5261cd312fecc58e1ac6d94a988ed8bb0260af07","first_seen":"2026-04-06T13:18:59.307787Z","last_seen":"2026-04-06T13:18:59.307787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xageur","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xageur HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8fhpEC0L9QcEFBSEZIkw7Ytt1hr%2FRefY4oqj6Ll8HLZ0MBAEROheX6Cxv%2FmA6UzLhc6pqP0zfg7zkNoFgT6cITszJp0O8fHBHK%2B83bX7pUL5RTZWvMMlbuXs1SxFD1%2BgzLyABM02A%3D%3D\"}]}\r\ncf-ray: 9e8114321f80783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perpcoin.oss-ap-northeast-2.aliyuncs.com/echo2.0a796d6d447b346508191da5685cacae0.jpeg?2.0.1774953446696","fqdn":"perpcoin.oss-ap-northeast-2.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /echo2.0a796d6d447b346508191da5685cacae0.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: perpcoin.oss-ap-northeast-2.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A8432E6E3733F223A9\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Mon, 17 Mar 2025 07:37:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-04-06T13:51:20.364293Z","times_seen":63,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":28,"dns":0,"connect":274,"send":0,"wait":275,"receive":0,"ssl":554},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-d253bac1.css","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oa3Y44JCLRnIUeZqMqepxqzfdmmXzBSNI98MLzOtHD%2BxOjC7OffWcah23sL5t0T6hWIGvdBHuMcOPEaL%2Bndyy5vfsfWXPkopQDMRC31mLururlhruy0cZnGlbdS%2F7qPZ6Xw%3D\"}]}\r\netag: W/\"69cc4ca6-3d\"\r\ncontent-encoding: br\r\ncf-ray: 9e81142c6aff0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-06T13:51:20.37555Z","times_seen":193,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/platform/dev/logo_144.png?2.0.1774953446696","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1774953446696 HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6542f5da-b5c\"\r\nexpires: Wed, 06 May 2026 13:18:30 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MYscpMS5Kv%2B5GwgVnPUmjfjnSTidUwf3lgOFwPu3%2Bw09DzUHxiATZ98U7%2BxXoGQ6V2aTjklzwNZ1n0PX44Gey%2FVe%2BcUjaGG6q04%2Bbme6XARocbygbMMpZHbQcck3%2BBYRJU8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811431d83b0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-04-06T13:51:20.408626Z","times_seen":105,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.025b7fb60f51b4b74b597653d3a7f6b63.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.025b7fb60f51b4b74b597653d3a7f6b63.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1874\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A8BC6A5B3534EC030D\r\nAccept-Ranges: bytes\r\nETag: \"FEE16CE16A23A37EF3920798742FEFBC\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8433800826941682001\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /uFs4Wojo37zkgeYdC/vvA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"fee16ce16a23a37ef3920798742fefbc","sha1":"f862e3e61b12495b9f683a71d3d06053bc407b0a","sha256":"dfca8887d489be448d10cbd211b271db5330d73d299fe9c76f3e3300a9045a82","sha512":"560e8d3bbee698aac3f311defb7031f289096c6101339fc642889b10e9887000240109dd3e25139f0f12b6b7583b0b185f96e86248bc98d3252e1bcc5ecec990","ssdeep":"","tlshash":"d731f7da97b3107f3e5d8374563429c5555b85d1ba050a2efcdebc4c9f066e70128071","first_seen":"2024-08-20T11:40:30.958723Z","last_seen":"2026-04-06T13:51:47.37984Z","times_seen":109,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":22,"dns":1,"connect":270,"send":0,"wait":270,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getAllSetting","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2WFP7w8hOUQR89oZcKdLirXoz%2BPZKY0Iddadx%2BUDiybIWQsqpqUtgZnSqCx3KangZCAgCzD3iTDmwb19uGLv8qyPbWRfWok3TfuTO1zI7e600J3AgMKxv98MJvszUBmU6SXSDMQGg%3D%3D\"}]}\r\ncf-ray: 9e8114392ebd5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13835,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47f102e82a69b42862d2bec4c55d840c","sha1":"a72cb0a954bcd105301b570b46644a9dd7f8e5b2","sha256":"a1ddba3114166f494729b1c99e4d58c79fe8e0069d887372127aee16edb01850","sha512":"397a3437cc15630121ce7340c41743976e531e5416abe3c541d931278ca2f3b2a5da6bed026f844a45f35c82a8deb7e999718301c040bffdb660ad2dbf3b7148","ssdeep":"192:NLcnGtOFgQ/fnFlIqIc2hsSH/VU5pLMAFJXyoqEGAs2suEsjqv5MNiQYQhnX7i1W:rKxg205MQQYa86sYcDn8","tlshash":"7b52564a37d8ccbc46d62ed5d0ab7a8abddc346be584dc55e4a7ef1c88499b2440f00e","first_seen":"2026-04-06T13:04:20.014718Z","last_seen":"2026-04-06T13:51:20.354722Z","times_seen":10,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.041ec199ceb36402b99c1cbc0b62daab1.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.041ec199ceb36402b99c1cbc0b62daab1.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 400\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A8B1E8233830E94281\r\nAccept-Ranges: bytes\r\nETag: \"33E405EA40F420F97179AC28C2DD83E0\"\r\nLast-Modified: Tue, 14 Jan 2025 05:57:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3462057762747232232\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: M+QF6kD0IPlxeawowt2D4A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"33e405ea40f420f97179ac28c2dd83e0","sha1":"03f9cc5828ee122d39d4c86a794c34ceac7bf015","sha256":"d5be3ddd699628f3957acaab7296387240475e3bb4452b38a2f36c4300b68ee8","sha512":"d4b0d55e73775ea14abfdd07a449a526c91f58cd46326feda313701e4c392165785b8b7ec2f941ee764f055cfdc609da603416188e8dc3612a6e7ae559ca0cb2","ssdeep":"","tlshash":"3ae0f1e277d3bd78cfda143f9c3aa971f45a5d2a0a2c535c424d613f0160684812c526","first_seen":"2024-01-21T00:00:18Z","last_seen":"2026-04-06T13:51:20.380765Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1899,"timings":{"blocked":812,"dns":0,"connect":268,"send":0,"wait":273,"receive":0,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0c773c8ebe0194a919efee1afe2dab519.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c773c8ebe0194a919efee1afe2dab519.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1321\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A8CE63A8313616947A\r\nAccept-Ranges: bytes\r\nETag: \"B86773B6AA18C4A58D9C9879EBBA8892\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2019276143507127384\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uGdztqoYxKWNnJh567qIkg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b86773b6aa18c4a58d9c9879ebba8892","sha1":"cb93b7a65e61e1206a92c01b63e9484b09885a5c","sha256":"1265faf359314ea74da3377a409087910279422db110469598b5cd514c918b91","sha512":"b2141ef8ef08d94acf6e764614667adc6c5893f057d55035d9a76c66b3ece5760ae98a67f500d8af66351a3ac6b7e254a65f21ce8ae6565e222bc89f3af61bd2","ssdeep":"","tlshash":"d321fbc2b3414eb836baae955312dc525efa7b6003198d8d3d212a67cd82311f962289","first_seen":"2024-08-19T20:18:19.617789Z","last_seen":"2026-04-06T13:51:47.369499Z","times_seen":91,"resource_available":false,"data":null}},"time_used":1638,"timings":{"blocked":838,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.09c082cb9e6e04968ab10af7c8dada9b8.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09c082cb9e6e04968ab10af7c8dada9b8.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 619\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A8BC6A5B353437040D\r\nAccept-Ranges: bytes\r\nETag: \"6CFE73F06DA3C5604FFE6B41D284540D\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1104380098065402225\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bP5z8G2jxWBP/mtB0oRUDQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6cfe73f06da3c5604ffe6b41d284540d","sha1":"9e9fa8144a7cb0f1da7daa4e5858fa49106c171c","sha256":"c0f3d5204944bd902aa03323ff6d9543ce33f9c8a523ef06b9953dabcd5e1556","sha512":"db8346b7c7d8216db595641f02a1fecccbbe268f7384be291647e939883348696f6d8b2d6754b62559eaf23a47ed50322013c87837c674745a05556bc64f665c","ssdeep":"","tlshash":"fbf0685df3fc843d5be15b598535f1b5d414ce3bc4e151080bd06891522b4553851b11","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.347701Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":1101,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.elbmalive.com/ws/fd8c0819-71fb-4c77-bc9e-2b7a26de421c","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"GET /ws/fd8c0819-71fb-4c77-bc9e-2b7a26de421c HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.gfxxlive.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TBc09VJNP1qsVlFmlM3v2Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Mon, 06 Apr 2026 13:18:30 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://h5.gfxxlive.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: joiMfp8bU2gTCyjCbGv+YxeMF84=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=900bdcccc57b453260957208fb2fa8c2; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HVtDcjlF1e3HeBko5E4kdj8dTVvQWQsA8yjTMvVqAQ1kesj96WM6p%2FvahiY%2BWauHTOdYDCqtEUtu1lnj%2Fh8iC6bjrr0ImmpPSGBlInwdPZZd4nC7z%2BhJX%2BMCQ0I4sSuuusFOa4US1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e81142c988fb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=595\u0026min_rtt=479\u0026rtt_var=276\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3118\u0026recv_bytes=1201\u0026delivery_rate=5196172\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=1629076d307c96ce\u0026ts=311\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":43,"connect":49,"send":0,"wait":297,"receive":6,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/filters-57934bea.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/filters-57934bea.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-c1e\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1S4rw23AsMnSzpQhuORhDidXa%2FyEHtTSmLYF7s4qofWXWXIusK2yLcPuW8KHJiMFqx5RqfGgA5S1%2FI23T3MLIuCoIYUCTTEnKMEgjR%2FX23LiZVlfNp4kuSnQ2V2L6Y9S2o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81143218ac0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"a619469c892663d16e52217c541c1a04","sha1":"387cd10ae6c0237a80a131840e635d8f82577a3c","sha256":"a6b8b67653ef725392bc0090c0297dbacf6851f23046eeded378a5adeb76a6e5","sha512":"83bda9bd9964979c5c31ec6db2a3a38ac20e3326b70e404813fb1dbed69dc7cf2c022993e33aa329911f25029fb63124cf365dbb1434834ff5ab276d2aa620b3","ssdeep":"","tlshash":"ab5124fdfcd7613356ee6ef941288454728eae20686e0a4df54bd0455933888e07f768","first_seen":"2026-04-06T13:04:20.018757Z","last_seen":"2026-04-06T13:51:20.335356Z","times_seen":10,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/currencyItem-a1c29b29.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/currencyItem-a1c29b29.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-4b6\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ee7T8P87TTRV4AgkpEG%2Buw9DeSb6VMTphkVcbg2E5h6B43e5vt6u8umbfjFt6UFq%2Bgae3gfCpgpUgGMZeqczH6aXymjyLJZqqQ%2BdoApz8dZCXeCxFUGRj%2BISLdX7djplYds%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81143218b00b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"d606b704cfd63cf18de83c32651a3067","sha1":"7c47aabdf35c96ee849c3ea6f372aacd9cd102ab","sha256":"bb4ae26269807983deb56d849a88ce4e659b0c70ea5e83fa00a9de7c41aa7840","sha512":"8c3955048459618032252e56af18372fa63e4f76bba34e521c30f0690423de7863f3498e0183821d5f07263a12ef061b71af0e2b082918635bac9b55b20a2352","ssdeep":"","tlshash":"a421ca9aaa01c7b1cbbe91a2c5bd0414120d7bda700185c1ebed148a3b9a5fcd728a31","first_seen":"2026-04-06T13:04:20.047228Z","last_seen":"2026-04-06T13:51:20.395115Z","times_seen":10,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/resource/svg/light/user.svg?2.0.1774953446696","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KnjKgf%2F%2BzlrjoyY3GFvAfwP4jo8QX%2FajXq8RC%2FnSSd0y9d7Aud0QfaUnPrp2I29GGgqec9GWo78Zb5LifTh4POo8MIYT9Ogvpn2HLTu%2BOaHSYo%2BC9HdC2ydsNmmL2ugoxlM%3D\"}]}\r\netag: W/\"6542f5dc-227\"\r\ncontent-encoding: br\r\ncf-ray: 9e811435dbe80b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-06T13:51:48.563498Z","times_seen":221,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0dbed02da73e34b8dbcdcc926a5da1127.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0dbed02da73e34b8dbcdcc926a5da1127.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 614\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A87CD23C3230374613\r\nAccept-Ranges: bytes\r\nETag: \"288529B0E33D3B66A2731D058A0EDB26\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12140603420238383984\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KIUpsOM9O2aicx0Fig7bJg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"288529b0e33d3b66a2731d058a0edb26","sha1":"45e95e851bc5f5ecf47f60051a2f337c4618b343","sha256":"c0a8c66763227f10f381f4aa054b2a851693e6519fd8daa435c326c4831bb34b","sha512":"47bd6e3b05c428e8fd039220d02a9e5498a8027c1aab085a7d04024472b2c88644e7b5097ddac8d2593c4d1ab7681ea57891066e36f782cbb28f34fef388432b","ssdeep":"","tlshash":"cff04751dff9f27d6bc1b051a7cd1027f2397c51403428308a18541cf01849afc56202","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.383169Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":-1,"dns":8,"connect":274,"send":0,"wait":268,"receive":0,"ssl":535},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/en-ee0598f1.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/en-ee0598f1.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-a478\"\r\nexpires: Tue, 07 Apr 2026 01:18:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufn6L2xNXgVSAPsYeBpdk%2F9Z78ov6YtvUH7NaM0dHXr0ks49byCI34F5GFIfJGyYHMOUVVeRv6CkO4lBAxpv5%2BaLLIq%2FgWVaF2vpoW1UAdXNbvzKAM%2FGa%2FjAqHFobO0VP8g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81143208960b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42104,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (42081)","md5":"909fc2f10a61e1389a9f595c223a1283","sha1":"fda5d74a74b93193e6cdb4c9996ffbed478957ea","sha256":"c8c530ae968dcf0018fb7c207507a9342518421344cdd4a346341de273500e9c","sha512":"5816141166ec20e1126e78d9df95e3f4fbd9c3e877e83acd8fac2a1ca67810cc49b5ec57c55785af59c59a42f66468ff528f2bba25b06f768f7b4c4c8cb353cb","ssdeep":"768:5CA4tZcEw/o7rKOdAFsifnAMC2rAaAMR6VoP6+6sPG9w1mwO6fpk7aOLxO:5CSponKOdebE2rdUVLsPWwqLxO","tlshash":"3d13f7893e1a989a04f3536774ce2e1160f60ac18255881f4fecc9fd53e2b67a367b34","first_seen":"2026-02-27T23:24:31.734965Z","last_seen":"2026-04-06T13:51:20.371548Z","times_seen":12,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-9d36bf28.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-9d36bf28.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHq9PMV%2FQDwSb8%2FP5kMEUpShcNGlo1exJVzXeSy2MuEam5sBGD9Gm9sjEG3dq1jcX7P7CpWvr259e77kZrmrY7%2BfYwsLMyKxGel1TNX6Cw%2BdZFBvAHxHhvCISoCuhlkzth0%3D\"}]}\r\netag: W/\"69cc4ca6-1fe\"\r\ncontent-encoding: br\r\ncf-ray: 9e81143218a50b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"f5b8dc34f4cb809f12a5b70fa7fcd8f9","sha1":"ffe9cb814a67e8bb349a20fc7af82346aa7228ee","sha256":"ccdd64755c50e718dfcaca6bfbd97209a5520f9bfc2ebaa5ca01d5a9689ed28f","sha512":"635afbcce4843fbf84785a2567e5f6df39d4f53d62ff7360a6ebc5e8c98f52fa8052a28691a98e67e3ed2f1d0662ca45f9718ec70b521f7d976231b53114964c","ssdeep":"","tlshash":"dff00e7f7d6a80b21bf788e8a2631820b61c1f4a3754c4e4d4870e10db388e7d12e218","first_seen":"2026-04-06T13:04:20.052382Z","last_seen":"2026-04-06T13:51:20.394298Z","times_seen":10,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/config.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:27.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:27 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 15:21:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DNjR5RLLbQw3z4Dacn9T6jA3958qzEQGMRoGUTWXyhvreQDkLOmvHD%2FOHhstgwgfJYpwfUFBAUQRTg5sw%2FhxUyFW61bkfLfnzIb2lZ1DkUj4rWzmO6Fk3r%2FggtssgaL2LDo%3D\"}]}\r\netag: W/\"69c54f08-77\"\r\ncontent-encoding: br\r\ncf-ray: 9e81141b5cbc0b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"67ff8a6aea8b026a686a55acabdaa518","sha1":"4a15b427024362562506bc25e32ff4366f62039f","sha256":"3199afa5d09d297658323a19b1ec939756856b700c9bb6aeb46687aa505ebfc1","sha512":"969bedd269b1bad6dac4746692b67c3a0ad79ddd36c1db6dc79e3f1f1d25ae9a8575d9f7f7b2c15b9d5070a7020ba60c19350dec7073a7a24252bc8869b2cb6d","ssdeep":"","tlshash":"16b0923d7b66090226a302806a7b774ca2d0e43dc8488c44c2929842a8464a3f0a68ac","first_seen":"2026-02-27T23:24:31.722069Z","last_seen":"2026-04-06T13:51:20.345416Z","times_seen":12,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xaueur","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xaueur HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtVjUMgpBEefkMnQbZQF8HCSy1L%2FsXGUCDSZbKrHSPcsdsTE2fxO%2FGw1HHhPyleaWodyWtJHrRpkNrCed%2FglylbXQY4fVhUbKppjSu7W42v2A%2F03H9gN36O%2Fz4Q%2FdtA1gIefmvQN7A%3D%3D\"}]}\r\ncf-ray: 9e8114358e5f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"97b4208900b0abaff21fb05c890fbc2b","sha1":"bdd7abefb3154899718dc8594b84061ef6fa2fa6","sha256":"89aa1288b9ab1ae2341e0316e4bd6291cbc5a823079deed9dcb7ddb4b1621399","sha512":"281592c3d20eb5cc38d652b62fb955e7f9a62effc769238fba8e3788a92700b44ef613f08aa9ff7b93ddf6ca2af03402834604b191335b5064775b5ae0fda1c0","ssdeep":"","tlshash":"bb9002555d1c8242a8c300a5951a160801243160266592484c99516680881a22444858","first_seen":"2026-04-06T13:18:59.318569Z","last_seen":"2026-04-06T13:18:59.318569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-c8685e2f.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-c8685e2f.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NnCa%2F6sx%2BwF30X0YVL14aOK6ZGKbBLtDqv7tIMHHKc6QqRzDO0k9FNs2cqH0bSPsxOClx%2BSx4udvND6OQlXIL8B2iPiANCqEMSiYSTzXtIXQDtMtS8hLjCwwjos3GFUxZ8%3D\"}]}\r\netag: W/\"69cc4ca6-308\"\r\ncontent-encoding: br\r\ncf-ray: 9e81143218b40b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"6501efe5b6257c064df86dc83764acc3","sha1":"7ccfa4c5c1c693c133cbfe05dd90d9ac498401ca","sha256":"9a1166a4d04c57a14bd4583435aae7fc38b281cb0c9ddc1d78f5ebd98d75c150","sha512":"a5a16c46bddc294b62b91dc88607b2773372f3df43759c90d51c1cff26713c088311f42666fd526eeef21b1787d43caa28a1f54aba5fe01e59cbd52e843a0a5d","ssdeep":"","tlshash":"6d01fdf8fc0c8ebb0ea20a400290360014091fddfa1419f198867d661be4940d7de32e","first_seen":"2026-02-27T23:24:31.6241Z","last_seen":"2026-04-06T13:51:20.376273Z","times_seen":12,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.02a1a902ab11d4bc4a5e9f1b9e6220bf6.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.02a1a902ab11d4bc4a5e9f1b9e6220bf6.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1353\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A84C8B37343675B8DB\r\nAccept-Ranges: bytes\r\nETag: \"3374D8DCC672161C3E942D71643DD6DF\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18229691747106943305\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: M3TY3MZyFhw+lC1xZD3W3w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"3374d8dcc672161c3e942d71643dd6df","sha1":"1eb89d286896e972f6f9e433541e1a406d336db1","sha256":"26a7521cd56d484b5a9775d11c173e6f67c45c68c2bde5feee095b3ff5be0bdd","sha512":"02c86573b4cf743a1576007a70029a3808734d6893546fde74c13a3912a6ad2e850309c5eb0130492321eba8a73b7256f402ea483c861761934463a14eb6aaf9","ssdeep":"","tlshash":"c921084493f1682c99fe6034d1fa5a10dc9de10e392cc8a2ffb9a804722142adcb11b1","first_seen":"2024-08-19T20:18:19.617177Z","last_seen":"2026-04-06T13:51:47.368829Z","times_seen":116,"resource_available":false,"data":null}},"time_used":1887,"timings":{"blocked":819,"dns":5,"connect":264,"send":0,"wait":266,"receive":0,"ssl":531},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B00MRmRj6UWsgTNuB6YSVMKQdceaSzAdCvBiWIpOTtlGGFuc5ZnGMIe6hYFCwgojhsgjStvkAW1gjNZeXTUrer9euUmRhvYCmBmX7ExgBRfUaqUbzveECwOSETwgRbmPqK%2Fn6AO7VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e8114369e785a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/type/defi_activity_type","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BYsDWKOrDAPZRTNlpIgARat8OlfuZAOFREu%2FKEwBhh0AaC96USbj6SpFVZoWFbXm4H%2B4A8%2F8bP7sE1%2B1aQmZT6yuohVV%2FgM4vrQ6BELZ2Vz1EineHnwA4OsLbJeMXOvLz2%2FIWpnVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811436ae7b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e81b1620634ef6ebe02978bde003eb33; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwlReJR0SW3tT0OSO4f10S8HDq%2By21sOwSVsog8yV1EZBstihbAg%2Fy342S%2BoZDyl7Ot7f4Zn28twBTD5l0EqCgEDkLPmRI7zsvbYDs19fkYSIQ6SAS4Sk45ESpTKonwY23POhC48lQ%3D%3D\"}]}\r\ncf-ray: 9e8114392ebc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"983d644f879e05585fb390a3abc6587a","sha1":"994004b1fa9262701e6ecfbe7bcbe5940b603bf3","sha256":"9e600365e5b9d06fcf2c11d5e9d423354502d8383558f1bfa6b0efe685883f27","sha512":"ff3f1538a9993369a2674779c7ad44d013d8af7a294268ecc56fd40a50f8492877b4aaa11121c0211442c7a8e836324c415fe415f3d3b449a652bd813f9cc306","ssdeep":"","tlshash":"4f01150e6674cf754a4641db42dc3ec8531f0663e3508d34414acf6c83f12760732548","first_seen":"2026-02-27T23:24:31.647646Z","last_seen":"2026-04-06T13:51:20.452065Z","times_seen":12,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-fa7545ff.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:27.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-fa7545ff.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:27 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-1b8a4\"\r\nexpires: Tue, 07 Apr 2026 01:18:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXdvNgffZEQP35r4LKcSZ%2BysYrcmLeoGdG4e3vTq8MWajzznTdchth6b%2BPmtEL55112JJeKeIW7GqOtRnHDF6CdPu92DNid3TguuHuS42dLYxKZxHszJFO7KjUBni6AsMjc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81141b5cb70b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"8c486f065d4d4026e33553aa8dd3445e","sha1":"14663adfc4c17c5ad7863834df5799589d4d9911","sha256":"a5cf0fb952d8ba6def92dbe11deaa9a034ab1d26c2262db8519aded435246f50","sha512":"e7fef816e0744d9170aac60c169b646a2e66ebab75127e037e6041895eafe4c444bbeb96aaf0c45eca6d6ac1be2027cc6f8cbee6655887220d5a87ba9a43bad0","ssdeep":"1536:BNa2v2A3wBDtnrzXghQWUgAhahBStudHR9hbF:e1A3wB2hQWUgAhahBRrbF","tlshash":"afb34c89650a0eff1cfe0994b98b5550306d1f93988ccca3b77b6e4927facd5224a71c","first_seen":"2026-04-06T13:04:20.033779Z","last_seen":"2026-04-06T13:51:20.343311Z","times_seen":10,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getAllSetting","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FeyYYPfcW%2BJqm7g7nFC49%2FGVnuEdA8AnUhbXPCRlwCgClhrY%2F%2Fi30f9pVvsw6Ml0GwlBsG7tcXaLcjdvFBbDuOjYoiur2UxYRI92tDsyXV48AFNR%2FM9yNqEMjh0BW1LhFkXrmMC5w%3D%3D\"}]}\r\ncf-ray: 9e81142c7846783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":40,"dns":1,"connect":1,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-2b2693f9.css","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-2b2693f9.css HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-a01\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qV0%2BNmxGv1kYRXDlLnUrNjN15Myp0sEXEuPPIQcAuJqwXHcGJ1u2tC1LjD5UgFgEkgHvwZjgwXQhEa9TP1%2BuGGnkfbsEgLk13RTzf6y%2Ffkmb61l15HemnHivJMBmzNW220%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142c6af60b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"da14004a0f9f575b572929b51ad49d9d","sha1":"d35a421336caf8887c27adadb814715e0aa39064","sha256":"2b2693f9031a17daa3c24c8d9d29cba6b63cacf82c6071312edceda539e4d418","sha512":"ba69506805ce4c7238df0faeab121d755f8056d9c0f98c0706e85121dffafa38e659a32359078df82e6f5689a6d812865873bae7474191b37f6666a8d98fcfe3","ssdeep":"","tlshash":"0251125cfa9911358db7dacfae885b4c90007ed2e04a9d96f543c70609dfa9337302ae","first_seen":"2026-02-27T23:24:31.659423Z","last_seen":"2026-04-06T13:51:20.378796Z","times_seen":12,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-9d36bf28.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-9d36bf28.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=62e24d5df10b8b72a42fc7542c577620; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyZPZz%2B7ND1XfB01gGPkak5dqN3O6fCI%2FbKi4I1%2FRUULQdyCdc2HClt84DafDcyQdStskGO6W7tpl1xsDOPS%2FS2DAUwp08fKqBcAmqGMeY5NUN9iDmKCLRKEBPc%2F20KxaHI%3D\"}]}\r\netag: W/\"69cc4ca6-1fe\"\r\ncontent-encoding: br\r\ncf-ray: 9e81142c6b080b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"f5b8dc34f4cb809f12a5b70fa7fcd8f9","sha1":"ffe9cb814a67e8bb349a20fc7af82346aa7228ee","sha256":"ccdd64755c50e718dfcaca6bfbd97209a5520f9bfc2ebaa5ca01d5a9689ed28f","sha512":"635afbcce4843fbf84785a2567e5f6df39d4f53d62ff7360a6ebc5e8c98f52fa8052a28691a98e67e3ed2f1d0662ca45f9718ec70b521f7d976231b53114964c","ssdeep":"","tlshash":"dff00e7f7d6a80b21bf788e8a2631820b61c1f4a3754c4e4d4870e10db388e7d12e218","first_seen":"2026-04-06T13:04:20.052382Z","last_seen":"2026-04-06T13:51:20.394298Z","times_seen":10,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xagusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xagusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uw%2BrryibLrMnxKniufaJUfWaLZUxew6G86sXleO7VfdWWpoo%2B2zBkT3eBAIWkehGpqsdOnzr%2F%2F3tQKZoaVkCxUSgm46G4DjyPtDlPA1sHFraBJvCvTj1evo3bXAHH%2FKgV%2BmmY5Z%2BRQ%3D%3D\"}]}\r\ncf-ray: 9e811433fe3c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1bdf4af4661d89e79acabd0e9c0891e3","sha1":"0e60e985bd527e3d8c35b0db712b4fdfa7c0afd2","sha256":"aef096441ac2ef78e66bf6f17848b689e57850a6d73a747219df8bd87f1ea9b2","sha512":"5d48f29a53f7e1628ae9ef61e628ec2f558ad21b556f865ab431b74d4dc515e515144e040fe48d968234f403699d6c67d54bac08bcdd7b15641459b585cb3753","ssdeep":"","tlshash":"ea9002955e1c8242a8c300a5950a120400243160266b924c4d597226c0881a2304885c","first_seen":"2026-04-06T13:18:59.324794Z","last_seen":"2026-04-06T13:18:59.324794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xptusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xptusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wqf2g4amwL7WuPXN02GwEgzJyBe0VuVEM4aDYkewmSym5aetY%2FjtE%2BvT9VOdf0R4x0cRN6G7yhD4E2%2BMnLrMOcLLoF9r2aU%2F%2BoueMS2mGFK%2B8RcwshnkjR51C3joB5czi9dsTgCWnw%3D%3D\"}]}\r\ncf-ray: 9e8114340e3e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69986869e71c6060db3ee189b2643f02","sha1":"de0d1fa1f737edd8f704e1d8f59d9256bf3c9498","sha256":"3ebc5a0bda0e49bb1e732607329c889b40e8e63fb988f7ef1aa7d73cbc58e9f8","sha512":"7e61d4ce4be7159bc43f16a8751b63fbc290db89bdbcce86858e8b46ea2740ce06a47b6031e0b87c55b20f0f47a67e5cf25bfe32fc97beda17a9f08f392c2fd9","ssdeep":"","tlshash":"1790025a5c1c9642a8c300a5950a1204042431702665934c4c595125808c5b22044968","first_seen":"2026-04-06T13:18:59.326135Z","last_seen":"2026-04-06T13:18:59.326135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/resource/svg/light/zu29.svg?2.0.1774953446696","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsrxFTB099rHGmhBKtiJWxaNar8uaI5bBLVnAA%2B5VxPeLi4G6tDKBJzCavlw%2B%2FA2Sm8yGByOFU%2F9R4PE19T544dZ%2F4XDkyTo1SU%2BkU4%2Bz95LFsJgnc12OgM2VCPGgsM8EqA%3D\"}]}\r\netag: W/\"6542f5dc-348\"\r\ncontent-encoding: br\r\ncf-ray: 9e811435fc070b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-06T13:51:48.57233Z","times_seen":208,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/currencyItem-15550dda.css","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-6d6\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGL3cB5lf%2F1BThTmVDkabZsPNn1oe7naRdCrl%2BjrTVq1PjHa0CvDfyOj4UJ8l0QGJB5l%2F9WrZjjyF%2FBCbaSskHeqSaRLJd8ZCuiFlNVKgHXhdQgnqH5FMl4Zow5m%2BXVKXdg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142c6b020b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-04-07T11:52:08.949351Z","times_seen":259,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-1cbc66ab.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-1cbc66ab.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-120a\"\r\nset-cookie: server_name_session=0fbb75dac72dbf685a85512a40072883; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yf4dxCl81%2Bpy0lpNIIYCDxVUHMh89bm8uKeE7EPr1KB4iRrz5aKoU2bM8ub%2BKGR0%2F48HNhEcbwWwyPHT%2FWAs30IoMtupLgxz7x%2Bj3D7IipXDCO5qFGDkKD%2BAO11R5SGEHdI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142c6b060b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4618,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4615)","md5":"ef47732d9a3b23b2df705bf99004bd8e","sha1":"b3f5485a08e2b55394ff7d0b9a7e28b62031f0ff","sha256":"c856cb58e112026bd37495a4599a5d51026fdee8020dedd9d36d61129f427516","sha512":"466992c359743440ba217f8a4563f19510cad057a5745338c08c3b3869b1be0ff6a09b5d262f7d4d7d5bcd9cfdf049ff902326a92e95620fba85d2cb8a759764","ssdeep":"96:c2LYsH+P9YBqD+wMALTcT/3b+JcQ9Su3tKZ3hvK+3YmUeAIM8jx:c2LYsH+1YBqiwZU/3bMe5hv5keAMx","tlshash":"de91b78cf8028a7d9ab7985048580421359c3bf6b10848f1f6be9d5e63b8a7ae791725","first_seen":"2026-04-06T13:04:20.011595Z","last_seen":"2026-04-06T13:51:20.373201Z","times_seen":10,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xpdusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpdusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ij12rWIgEL9TFUjQIAmviPRZ5shJmXpbb%2BvDrKah7viC23H9m4BDCG6xlTYDGLoNxJUK%2F3rkaQfnlp90KgJLW57KGjgzoNz6eytILRHA4pxkZgXw3VP4f3tdUcPIH7fRbwkULUDvTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e8114322e105a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.01bfef044560f45e786e98bdec1295ec8.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01bfef044560f45e786e98bdec1295ec8.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1907\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A84C8B373436C7B8DB\r\nAccept-Ranges: bytes\r\nETag: \"9459A1B16A6346A8DAF9E2E700D8A0AF\"\r\nLast-Modified: Tue, 14 Jan 2025 05:54:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17079821215456291766\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lFmhsWpjRqja+eLnANigrw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"9459a1b16a6346a8daf9e2e700d8a0af","sha1":"7aeef8fb0483dd8f7089324bf338a8baff19c377","sha256":"fdbb68edeff25fa09404179dfc144d6343af95599093ad71043bd44939983a04","sha512":"87f2d69526f66e1169d4ca8a4ede4337e912b04ceab6438d0cb29021f3687a3e6802fc103fb77f7af9ad5ec1ebba3e404794cf0daf8a13f2c05c2be05c7e1376","ssdeep":"","tlshash":"c141f9a8f7a5f50fec540152146b69040df94844b560c04f06df94be4aa7af38c9f584","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.382723Z","times_seen":113,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":1100,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perpcoin.oss-ap-northeast-2.aliyuncs.com/echo2.043913a2152a24663a0d4ff51883bac6e.jpeg?2.0.1774953446696","fqdn":"perpcoin.oss-ap-northeast-2.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /echo2.043913a2152a24663a0d4ff51883bac6e.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: perpcoin.oss-ap-northeast-2.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A87CC0343534721964\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Mon, 17 Mar 2025 07:36:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-04-06T13:51:20.364293Z","times_seen":63,"resource_available":false,"data":null}},"time_used":1151,"timings":{"blocked":40,"dns":0,"connect":276,"send":0,"wait":277,"receive":0,"ssl":557},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.09e9ba6ad8ad8400391a8843e186d9853.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09e9ba6ad8ad8400391a8843e186d9853.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 525\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A8EE24003436B97465\r\nAccept-Ranges: bytes\r\nETag: \"39EF9D38FE0AAB83585DD87672DB2F9F\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17681862502574744688\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Oe+dOP4Kq4NYXdh2ctsvnw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"39ef9d38fe0aab83585dd87672db2f9f","sha1":"73beb0a9847b3f98e5e96b384767896452dfaa33","sha256":"ab447108bbc8e802ba2d67626f51554cb9f1fab5db2bfeabfc8371eff71204cd","sha512":"5a1441bce9b88fbc5f0ecac5aee541406dd05eec641a6d2db62c6c38d7d59365d5568aeb95efdacacd125d808fd0d9e64c7954305b6da00dab35ec659b7a75c6","ssdeep":"","tlshash":"b7f00ce9f558cc65461855e6cf79742100fefc5cd57cf81c8d45f564f54d41259502c1","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.386186Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1659,"timings":{"blocked":835,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":549},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perpcoin.oss-ap-northeast-2.aliyuncs.com/yuyan/en.png","fqdn":"perpcoin.oss-ap-northeast-2.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:31.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /yuyan/en.png HTTP/1.1\r\nHost: perpcoin.oss-ap-northeast-2.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 6766\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A8E9DEAB31390B1063\r\nAccept-Ranges: bytes\r\nETag: \"863DE734722C525ED540F095C94BF314\"\r\nLast-Modified: Thu, 16 Jan 2025 13:48:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9736528007879076485\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hj3nNHIsUl7VQPCVyUvzFA==\r\nx-oss-server-time: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"863de734722c525ed540f095c94bf314","sha1":"ca240b3a9d6176169ceb873370709df6ef360eb5","sha256":"716be4dffa1f203eddf86670b83b92162d20f949132aa272b1a0dcf213649347","sha512":"adef9f81760545553efb97c461dffa982668e27b7d6723cd199e82b9e8d7e96430ab58a11033e46a31c9bdc06f911a41369a7f6f3892c7297b5d5b9c8a02b241","ssdeep":"96:S3CT4gSy7U1Vh95+qQ7Yk9S0WW3XzYOUqT+wn19Gnr0MxHwl/51vYkwTxVpP/Bq:t4EgFj+Lr8OJT+wpMxmOkwTzRJq","tlshash":"b6d19fd2affe643fdb37563d41881ad548f2531f36920e642e9348a27da2c607d651b0","first_seen":"2024-12-21T20:01:20.09876Z","last_seen":"2026-04-06T13:51:20.445061Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":61,"dns":0,"connect":282,"send":0,"wait":282,"receive":1,"ssl":568},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/charting_library/charting_library.min.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:27.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:27 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6542f5da-2a6b\"\r\nexpires: Tue, 07 Apr 2026 01:18:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6F22FUhhxHbb%2BoaqHr7%2FJOYpARzbQ9oH6AUYoWChU3%2F3Ub2ySlxx0P4rBbHFZdowhrjlX%2FgWqjr8G9GNIPfTNOW5uFcvkmtvsbiu3bsGmHE0Uk1bqJA5oifItuk692iVauA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81141b5cb30b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-07T11:52:08.976668Z","times_seen":629,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/vendor-eb88f680.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:27.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/vendor-eb88f680.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-e35dd\"\r\nexpires: Tue, 07 Apr 2026 01:18:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8x3i3b%2BmP2K2TnkT12Oi2jOL9CG4vGZTBdI8Z7RY59z5Gc8XnrBHK9ogNmQ4Q%2FgRFti9DjgQDUF2RniEJFMS5bfIszyzA%2Ftay5JeqrH7IZ8J%2FsChw3Y7nPUIcAYLdqpook%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811420f9150b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":931293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"93e6de8cbbc1c3bfa6342405523a6f7b","sha1":"6bbf40819fcfda783ded60ba027423651fced963","sha256":"7eb512d7a7e756d927219e74c0534e711bf437d5185f3f37565bf68f0d8ac2d4","sha512":"a2cea3f865229554761f1016e0e33a737512990369d772ee1771361e4459a1bfd5db3648904dd456072007b8d9c1e01e67426de26e0a1b4ae026a0872479053c","ssdeep":"12288:b/4JoiQ754+28vbUw6+wWAcWoqrbR0JUd/WIh/mL0uZRWx9r:b/4Ay58L6+wW/WoglZd/WIh/mL0jR","tlshash":"0b1539c97292f06147ab24e240bb0006f3396e59740e84a4f16dd9db7d7ad89e277f38","first_seen":"2026-02-27T23:24:31.743909Z","last_seen":"2026-04-06T13:51:20.365074Z","times_seen":12,"resource_available":true,"data":null}},"time_used":1585,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":542,"receive":1043,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/resource/fonts/Arial.ttf","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:28.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gfxxlive.com/assets/index-1b3bf7ae.css\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6542f5da-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iST54SeIBxGQHvsWrkA3P1xx5KjKjO%2BKkNVgC3s7FtwGuhDo4lCJf4kU0UYySRoJAm9giRPrMAnaEpyyneSAGvNEzv7lpKPlH6TaZxDZ9xfe7JZas3fOv1wLclnd8FoHQ7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811422aa490b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-04-07T11:52:46.124429Z","times_seen":862,"resource_available":false,"data":null}},"time_used":2260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":1688,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-ae0ae6ee.css","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-ae0ae6ee.css HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bae20cae3ce70550805d3a9a61092553\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-2875\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EQMxt%2Fw4GJFOEtldRoKvyjZK1Ll3r493FwgIaVQrFyoiHiWIVrlJCtYW0aJBjVCJb6XB5jBFXRCAUbU1%2BIeiEKA0ENDHiMHEDqBOTt38vy0J2utVxqqIdyR6YDrjyHZY%2Fw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142c6b030b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10356)","md5":"33e8091c75d012eff93e6ad34dff2061","sha1":"5fc58cf3cbe48e939588815f9dbd965be39284b8","sha256":"ae0ae6eee7fdd9597228eaf11858526b2edd6ab75f58c8de80c6362aea1623c2","sha512":"e8633421b90c3c98d6ee196c293980408be537b852d81b2e26b34005ce74ae55de894a5d13c04ba3be32a5ac76ae0acbb08b5cc6c6fcfe13f81f00aa3f7010b3","ssdeep":"192:dghePf+EYvtnNu39r1KptNGwHJrzsWtcy7jRw6jXmLExPO:d4XVnNu39r1CtNGIJrzsWtcy7jRpO","tlshash":"2622222cb3a42638ac3be156eec84dcce109ba21d653dde5f6679a260dcf1e31771058","first_seen":"2026-02-27T23:24:31.63491Z","last_seen":"2026-04-06T13:51:20.447705Z","times_seen":12,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gfxxlive.com/assets/index-bf4d5967.js","fqdn":"h5.gfxxlive.com","domain":"gfxxlive.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:29.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxxlive.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 02:40:15 GMT","end":"Tue, 26 May 2026 02:40:14 GMT"},"fingerprint":{"sha1":"B3:B0:28:9F:80:C2:FA:FF:AD:04:CA:66:BF:94:45:99:F4:0F:00:A9","sha256":"5A:A1:8A:13:58:20:C3:9A:8F:2D:8E:6F:A3:EE:7B:EA:E0:F8:D2:66:C2:6C:FD:24:19:AA:A1:18:2D:6A:6C:A7"}}},"request":{"raw":"GET /assets/index-bf4d5967.js HTTP/1.1\r\nHost: h5.gfxxlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-39c9\"\r\nset-cookie: server_name_session=5b6c276c72fd20151120e51c6cd2cded; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDeVT5iqgX3qKabr141dgHkKoo%2B7WfnW6M9AxC5ee74o%2Bz3DBpp3PCefsYDNdgonqfpYsigNSpx0q1JXgv%2FNXb4R%2Ftn%2B4U1CAH1MM3vbdQowDLqWBq3klrH%2Btsk3uh9k0oE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142c6b050b31-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14793,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14792)","md5":"eb207d8fb848b9b1d3c9e4e6b4298681","sha1":"31c1667c9b8ceef8ebb64ec27be92dc1f3a8fb42","sha256":"3a25b890f053f9407bd2c192760880dd0ad9a5a5f57b1a78a32841ab6e088a18","sha512":"fc1eed0d7fce6fb42d77347aba7108fe08df1b60a5a3f8e6f1c96247f3121f21c0809d6ccac36dc568bc955d0ff3d10dc5bd0d72f0fc0afb40cd98c77280ac5c","ssdeep":"384:RHCKOobN0qbi3/PfPnHdl2ZFjJZQnPDfqoATZss+4p4JeJ36WoSebhdlcYCLiI:05Rwc3XL27nwDfqB2VVhdlcYCLl","tlshash":"8c62e8aaf5079a3df2bff05140880050b62d7fea5009c8f1b9bcad466752ee8b395719","first_seen":"2026-04-06T13:04:20.032489Z","last_seen":"2026-04-06T13:51:20.386868Z","times_seen":10,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"104.21.94.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gfxxlive.com/","date":"2026-04-06T13:18:30.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.gfxxlive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.gfxxlive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nykYuExb3clClR73wyTC8wsIw9JGQkpAC9AJ6y4698%2Fy81621bdkTSwSk9xrzvwZhxuephD0Vi7Fhu%2FUAVKUL30zkLEMuDJfMzY6sKwW%2FdFtBwZw4SKhv6PjTKQxwYoPST%2BktIVRA%3D%3D\"}]}\r\ncf-ray: 9e8114320f70783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}