{"report_id":"ee6eb0b5-90c3-4ee7-8e0a-6ddffe0b72e2","version":6,"status":"done","tags":[],"date":"2026-04-30T10:30:38Z","url":{"schema":"http","addr":"h5.gtcfxtrade.top","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"104.21.75.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/#/","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"title":"GTCFX","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.gtcfxtrade.top","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"104.21.75.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T10:30:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58314,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.213059+0000\",\"flow_id\":1389353993480342,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58314,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":5965,\"start\":\"2026-04-30T10:30:23.567446+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58328,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.230769+0000\",\"flow_id\":1951709093931257,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58328,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":904,\"bytes_toclient\":4662,\"start\":\"2026-04-30T10:30:23.567545+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58310,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.237249+0000\",\"flow_id\":639222922848285,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58310,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":5965,\"start\":\"2026-04-30T10:30:23.567325+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58336,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.248080+0000\",\"flow_id\":637923695241653,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58336,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2026-04-30T10:30:23.567733+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58300,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.254236+0000\",\"flow_id\":388424750048936,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58300,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1614,\"start\":\"2026-04-30T10:30:23.566952+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58308,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.256978+0000\",\"flow_id\":1726173918767009,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58308,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2026-04-30T10:30:23.567201+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58352,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.471374+0000\",\"flow_id\":1738683011005166,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58352,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-04-30T10:30:23.817902+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58396,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.478909+0000\",\"flow_id\":1688715361484019,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58396,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":5965,\"start\":\"2026-04-30T10:30:23.818419+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.483140+0000\",\"flow_id\":111740809346209,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58394,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":904,\"bytes_toclient\":4662,\"start\":\"2026-04-30T10:30:23.818337+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.484844+0000\",\"flow_id\":1316421153815436,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58364,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":5965,\"start\":\"2026-04-30T10:30:23.818060+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58384,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.489695+0000\",\"flow_id\":80080457923661,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58384,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-30T10:30:23.818253+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-30T10:30:24Z","timestamp":1777545024,"ip_dst":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":58376,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-30T10:30:24.506064+0000\",\"flow_id\":1800536982518768,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":58376,\"dest_ip\":\"47.79.48.222\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo22.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-04-30T10:30:23.818160+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5.gtcfxtrade.top","ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-05","domain_rank":0,"first_seen":"2026-04-16T15:48:34.8373Z","last_seen":"2026-04-16T15:48:34.8373Z","alert_count":37,"request_count":37,"received_data":5411301,"sent_data":15811,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-05-27T13:10:39.834855Z","last_seen":"2026-04-16T15:48:35.519732Z","alert_count":0,"request_count":40,"received_data":202284,"sent_data":18058,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2cfe8348dea72032258bc7064bd798e","sha1":"84706683c81962724e4b066434268e0061ee1ebf","sha256":"8220c0f9f86e81bedc340040589d92d1f84da822134e1dab06d0a9cdef251d09","sha512":"9c9aeb7adbf19ab7a8bfd1d71d36a1413188e3667f8c1ef8f1880c812bdeaac8366613773b180e1a99ce1c578344b7c4e9151deae9f809541e6d55af8c70aef9","ssdeep":"","tlshash":"5811abfe191a60297303404e976b79116426a0a9400e184177cc9a9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2026-04-30T10:30:46.08576Z","last_seen":"2026-04-30T10:33:35.968393Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-30T14:43:21.735691Z","times_seen":32468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-30T14:43:21.743246Z","times_seen":35760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-DDAjVMGg.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d22687cca848b9d7e7ceeff5f7593f","sha1":"f9bb0554cf6c72cc2a0f42fac2158a3a4ac95c47","sha256":"939eb059dac3e2dc040ae2720236d392447ca6d8106bc805a21ad11cc4521625","sha512":"9581f61216267cb75bb28b3c9dc2c627e940f88d50eadf5e756b854d706ce0acbd1252eedffb99be725eeb055d4814726cd6f9468261d7b8db54ead59d777d9d","ssdeep":"1536:8JZw1tnrD/D7tdF8YaZo/fitR1dqevQjGk0pRyn2xI:Hx6YukitpkYRynMI","tlshash":"cbb38f49990b0ffe66fb04542547141030b40f9b9988c8bbb77ddd1a3bfac99a397728","size":116264,"data":"","first_seen":"2026-04-30T10:30:46.066727Z","last_seen":"2026-04-30T10:33:35.936593Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/filters-YgcMkNQc.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b7c941d042e9f5fcdee8943a1f8a9256","sha1":"9708c19c31930866ca89ae8e9fd558867c4b9a2b","sha256":"2b49d98b28dbb06cfdf96ba53c9a916f935adaa59f5634905dae1e1dc542c37b","sha512":"08165af0245aa38e03e3f2126b862f486ea705ea0aaca60b84c8b86adfd62035d509c37e198780090bc4787b559006358f9c74d80a43da143f664e5b39a30638","ssdeep":"","tlshash":"045132edf8d3a13347ee5ef944188524b18e7e14685e4a0df54be0416b63888e07bb64","size":2919,"data":"","first_seen":"2026-04-30T10:30:46.00059Z","last_seen":"2026-04-30T10:33:35.923377Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/jbp-DygaAEDq.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a57a01499d87770e61dcfb956f60ca53","sha1":"9e2cc2bbc34952e6a52594b7ecaa72eaa2428c70","sha256":"21b70d4d5a5cefe7fda688189a36804ecf88de17baddeda2cab10a686e5d763e","sha512":"20d385ac78c779cbff88e490ad1c4a7fd992b5b6e23e26a9a1217c981231e59f0c26cc7fa06d34ae8045ec44efbbaed5e0a877d17b0472b8745e8b7ed4386d04","ssdeep":"","tlshash":"3aa024030fcc0175001011144f005f753375000c35740371500d0f54070f1cf1f0dd00","size":76,"data":"","first_seen":"2026-04-16T15:48:51.63087Z","last_seen":"2026-04-30T10:33:35.91537Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-D2sW8kTX.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ecb3e6a29c97705e257c67b61b95d19","sha1":"de4afa031882dcd4537dbae454a5b7caf2e48738","sha256":"16eaf6a3ca5bbbe911e5bdfd153825286b7883235d05885c93e7c3822b4fe9a4","sha512":"3b9c00eb3e384b21f7f5d2634565863c052f34fc71378fa637a31ed393b5776ac1e941756d1d33e32382c6f9045a18d424ab1f841a0f4cd5201cf35825f45dde","ssdeep":"12288:+Rod822GJWsKC7hekFlQVju/k+kkRbMInEW0fvl/lIvtWEAJGsqsnsXDG:rZrN+o/kIMOEWUlUAE+GsRnsXa","tlshash":"d525199cb614b03543a731b4057f090f933a680db54b85a8fb69d4ea6cbd44e227bf78","size":1038938,"data":"","first_seen":"2026-04-30T10:30:46.003636Z","last_seen":"2026-04-30T10:33:35.966734Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/vendor-DDN_ga_S.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"62f6855c578d54641e5382833b596b2c","sha1":"c4365c1b6e03e7422256a5c794d2943ef08c728e","sha256":"28147d309b30417609deb8b28f88d7b34e9ab0997b0e6d208375383858f49aa7","sha512":"3f370811ac991a207ba3dc903e47d5010866a0c1fcb39fb0a5402c41d27fee5f8445330ff6695d5c8d4e1e4370f148cb07caa0ee762719f51a7e0d54ac144fc5","ssdeep":"12288:tYpqVW37rmXYlq/D0S9QYK5lEsyDf5sKhXgdukWIlzhHyfdgJij:tY8VwaXkcAS+YK6T5s0X0ukWIlzhHTg","tlshash":"451539c97692f06147ab10e140bb0106f3396e59740e84a4f1a9d8eb7d7ad89d2b7f3c","size":921326,"data":"","first_seen":"2026-04-16T15:48:51.698886Z","last_seen":"2026-04-30T10:33:35.945657Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-DrVf0u3p.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e55f1d441eda25bf126ac933bbe49b03","sha1":"554025347aed0e7d8b4d427c91a484a20759777d","sha256":"35b1bcb68982a8152e4e1034425631b4e8f61afd6f07600a452740cd2e011e26","sha512":"b884d162f4b2930248fe421b3a8d95bce72401a84e011fd616398533f6294fd2b49e41b360cb1c9268ff8b177267e6ab57fd0e5de425ec9ea0dc6383cb4f5c3d","ssdeep":"96:GuR+UwfW8JvYFLqCwz9XuO4YfH8Cwe1y0imVV6dSnp3hrlF3CyVTBoGuPMSTHjX:L+UwfWKYZqCwzJZtfHlwIAsESnphrrCL","tlshash":"92a1b68db806cdbea9bb944008995411255c3bfab15c44f6f3fdec0663b4abad349721","size":4665,"data":"","first_seen":"2026-04-30T10:30:45.985019Z","last_seen":"2026-04-30T10:33:35.955841Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-v6uZVLrh.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"078efc222205720077519fd8700fbcb0","sha1":"f13d3bc38252415a73cef174207e4ab271485309","sha256":"03721550765c7472c01988aad127bd53ff6821f2abf46b1889e771c324b32814","sha512":"64fe29fabc90165da4ac33130f6fce97dec0345ec316844ebd17efe42fa3cd055aff2510bffc9e3f8d9ae6e6536b8dc3d9256e4cb58ba837d3d36f0bcf483477","ssdeep":"","tlshash":"9701d0f5fd0dcfbb1fa2054051902500140a0fedfa1815e18c477e661bf0850da9f72d","size":772,"data":"","first_seen":"2026-04-16T15:48:51.716914Z","last_seen":"2026-04-30T10:33:35.927568Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/currencyItem.vue_vue_type_style_index_0_scoped_54ccabc9_lang-1sQaPn__.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"515165bd3c0664d40fa94eb41ef632b7","sha1":"8f0e7150cf7fc9d45e4a5b0775a05fa991431ce3","sha256":"5bedbb279958f88c7fbbeaa3f1595d0efeb15f814fa572ced7eedaa16ce2c78f","sha512":"7bca74b6b1a6a335410582775305c9f609ae0e42ea647b181fb8d38bc119bfdf9e915403b9a1832d45f1e7826921b8f481b8c8863f8f62a55770b47e13df7c3e","ssdeep":"","tlshash":"3cf036465acc53bd2a72017a4f9b3e6522f704994afd52b5254e4f38476a3074e27702","size":515,"data":"","first_seen":"2026-04-16T15:48:51.624277Z","last_seen":"2026-04-30T10:33:35.937402Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-BXGi3NQq.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"49d0c199ca14a0880ef041a6c6fc82df","sha1":"166947ac07d62ddd92c186ec25aca5db1492b8f1","sha256":"e031c7dbdae7876b63c46e50de92e4efe977c77c3fcc5564a82c4e192b26925e","sha512":"ec2527331d99cdfa930619344895068ff75e2b880b515f7a9f461d33baa5140f1e29ddf668856a57bae2de0ea191c8eecca69ec7b7fa33a5fd4cba8032d6f7b1","ssdeep":"","tlshash":"45e0ab1ebc45cab309975844e33d0a000a2e46c84335a4e117b816380396dedb31df2c","size":431,"data":"","first_seen":"2026-04-30T10:30:45.949601Z","last_seen":"2026-04-30T10:33:35.941229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/en-DitKjTsT.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a65bd591512af559ac5a20257fe8917","sha1":"5e0ac46d7b6b20c32bcfc207337e42dad11355e8","sha256":"7b41fab8948e97b032c8dbf54bd2f28e87abe9451f50ed227c0e17ff8616eced","sha512":"482114f7edcbb58551620f3a6c494cfca9f66df93a6a084aaa1edb2709d9947b48adb0c216de414830c8fb116093eec22bb29e2aa85e3f8a04ba440a849da2b0","ssdeep":"768:+GtZcEw/o7r4hKxsiynAMcIrAaAMFVoP6+gsPG9M8mwO6fpk7aOjxfQnW:ipon4hg2+IrdFVFsPWM9jxonW","tlshash":"4713d7897d1a989a04f3537674ce6e1120f609c18256881f4fedc9fd53d2b67a363b38","size":41944,"data":"","first_seen":"2026-04-30T10:30:46.064672Z","last_seen":"2026-04-30T10:33:35.916861Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/charting_library/charting_library.min.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-30T10:35:31.036365Z","times_seen":924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-BXGi3NQq.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:22.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-BXGi3NQq.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 273d19dddf085bfa32f\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\nage: 1\r\ncf-cache-status: HIT\r\netag: W/\"69e7733c-1af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WceppbHuaV%2FvFn8hU9awJY6VRiDmGpOccTVtKt3bP%2FoQjuqGciunaSbcbXnql4z27HkAzMGZfxrm8KTGjpCoKJ1xCxlm8D9npBzJJ95y%2Bp%2FFimHHorsYvBWKbOWWlC4d13FHw%3D%3D\"}]}\r\ncf-ray: 9f45dee3f8a1b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (426)","md5":"49d0c199ca14a0880ef041a6c6fc82df","sha1":"166947ac07d62ddd92c186ec25aca5db1492b8f1","sha256":"e031c7dbdae7876b63c46e50de92e4efe977c77c3fcc5564a82c4e192b26925e","sha512":"ec2527331d99cdfa930619344895068ff75e2b880b515f7a9f461d33baa5140f1e29ddf668856a57bae2de0ea191c8eecca69ec7b7fa33a5fd4cba8032d6f7b1","ssdeep":"","tlshash":"45e0ab1ebc45cab309975844e33d0a000a2e46c84335a4e117b816380396dedb31df2c","first_seen":"2026-04-30T10:30:45.949601Z","last_seen":"2026-04-30T10:33:35.941229Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo5a50259d772745ffb5be2b4f7f7963cb.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo5a50259d772745ffb5be2b4f7f7963cb.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1786\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F425767583235CCF54A\r\nAccept-Ranges: bytes\r\nETag: \"50D9857D0776A5F0B07283E44E642A9C\"\r\nLast-Modified: Thu, 05 Mar 2026 17:29:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 328063114057089210\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UNmFfQd2pfCwcoPkTmQqnA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"50d9857d0776a5f0b07283e44e642a9c","sha1":"5e3dcc0ddf578f0afa81b26a2b0ccae6ca6c78b4","sha256":"14c03b96fb9e6f79a67d002a7a36caf3d5bc084b3f3f032be4987d2af11e94c8","sha512":"57a2ee0f2efb8a620371e029ea2ad039046fb416f06dc84506de6c18b9ff21497d5a099caff730835c66d0df997dbb032f53c569288c45807a2ecfaaad5a2f60","ssdeep":"","tlshash":"14312b7a462d77f49905083a3f25f1699ee720326a2b2e02301a732808ea3c5db11898","first_seen":"2026-04-16T15:48:51.701861Z","last_seen":"2026-04-30T10:33:35.94282Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2942,"timings":{"blocked":2619,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/flow.webp?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/flow.webp?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 526\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F416B4B1332393F3126\r\nAccept-Ranges: bytes\r\nETag: \"A6F8D66D001162ACA71A99E32842D7E2\"\r\nLast-Modified: Tue, 10 Jun 2025 19:23:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9615917347005933130\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pvjWbQARYqynGpnjKELX4g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 36x36, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a6f8d66d001162aca71a99e32842d7e2","sha1":"ca90fb56c941fa5db24e9b4f9fbb43e7746de825","sha256":"49d2b0d8dc54fd81e2db12f2bcc19994440fb7b9a386f2fcda26dd05d5d2ec73","sha512":"cb124d30a9e9e3df75d25213f3bbc57d75e70172c65f2fb8a9944a3982e3789e3ab732b901be97b3da267f7cfed3189242993f56ca56e14f6221828b67042ad2","ssdeep":"","tlshash":"aef075809d0de7178602740cf8141b1881b5a29501abba075e7265f3b83bd5d6010f37","first_seen":"2026-02-01T01:35:54.630541Z","last_seen":"2026-04-30T10:33:35.917478Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1934,"timings":{"blocked":1604,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/AAVE.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/AAVE.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 6687\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41269DA83534E067F6\r\nAccept-Ranges: bytes\r\nETag: \"A6962887571E267FAC4D7800C5DC2956\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6863835660150838150\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ppYoh1ceJn+sTXgAxdwpVg==\r\nx-oss-server-time: 19\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a6962887571e267fac4d7800c5dc2956","sha1":"34f2a82e3634b36f0127cee16ecc492893cf33dc","sha256":"a6edc2189b04f319b458ea09a4c084672027674f0d5702199dd2e75887929f12","sha512":"abd4ac3f931b545ce00af3809396ab5d82842b7ca89fda7dd24b7084d9ebdac351ee7afd875f0d203f6be31037478871376512d3988f3abe677c105e1e26d7cb","ssdeep":"96:Oo8HIMmS25nzCrMI2hfNEYY4Fpj8338zcB0ioQ1UVVUfABQhoaf8JrvmnYE3l:Oo8HIPSEnnLp3o8zcB4QAVKAsQbw1","tlshash":"78d1ae182e4802671c01960dd192a34a3f0f948eca6b8988767687b53031e7a7af49de","first_seen":"2026-02-01T01:35:54.653515Z","last_seen":"2026-04-30T10:33:35.918539Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1984,"timings":{"blocked":1633,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/vet.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/vet.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 5408\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42269DA835342E6BF6\r\nAccept-Ranges: bytes\r\nETag: \"B0F716E718D02661DBD9FA7C4AF6A902\"\r\nLast-Modified: Tue, 10 Jun 2025 20:23:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8500964667948336259\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sPcW5xjQJmHb2fp8SvapAg==\r\nx-oss-server-time: 46\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0f716e718d02661dbd9fa7c4af6a902","sha1":"d6d3cc575b252f392482acc4364f187b1de51134","sha256":"77df4a3e598c87be1b3986b9833b3e4c652ab18222fd908d3c7a9aa85f922e34","sha512":"2fe874f180bbcb683a844ca0c79f3207e7cf31753202950d540f559b10749407c64cb67ee10ad90de5ed8c706d6bf5e22bf698b669b912d934b8be10f79099cc","ssdeep":"96:wfqfoIsgnk3ymf+X3/QPI3CbvlLn9mS6YNcW2QwZ8drBHsv:0qf5C3JGXvQgaJhjNcW2Qy87Q","tlshash":"fcb19e36f9c7edcbabfdd7ee6644e0427859600b4170d02876ad445970481facb2c617","first_seen":"2026-02-01T01:35:54.633805Z","last_seen":"2026-04-30T10:33:35.945015Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3002,"timings":{"blocked":2624,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/jbp-DygaAEDq.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/jbp-DygaAEDq.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20f019dddf085d09fd3\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69e7733c-4c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6bTsWHgvEeoEG9Wl%2F8Jzestyb4dd7Kc8uvmUqf8e20sL%2BHfk7Ou0Rkb2c89CuYbE2ZSRFnnUitjeHnee%2BqmnziKWY%2BxvT9kK3M0QmVa73AlC19u1YQ%2BjU46ZfEDvPPZUo%2Bxow%3D%3D\"}]}\r\ncf-ray: 9f45ded7cf11b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a57a01499d87770e61dcfb956f60ca53","sha1":"9e2cc2bbc34952e6a52594b7ecaa72eaa2428c70","sha256":"21b70d4d5a5cefe7fda688189a36804ecf88de17baddeda2cab10a686e5d763e","sha512":"20d385ac78c779cbff88e490ad1c4a7fd992b5b6e23e26a9a1217c981231e59f0c26cc7fa06d34ae8045ec44efbbaed5e0a877d17b0472b8745e8b7ed4386d04","ssdeep":"","tlshash":"3aa024030fcc0175001011144f005f753375000c35740371500d0f54070f1cf1f0dd00","first_seen":"2026-04-16T15:48:51.63087Z","last_seen":"2026-04-30T10:33:35.91537Z","times_seen":4,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/chz.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/chz.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 5044\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F4157675832359AF24A\r\nAccept-Ranges: bytes\r\nETag: \"5165A9810B29D7A1F0BE6365959B35EF\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15325610307530834385\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UWWpgQsp16HwvmNllZs17w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5165a9810b29d7a1f0be6365959b35ef","sha1":"8654bb77b4d4b72d4c928119730ae8fc8beffe95","sha256":"3738208549a16ec5d22bf8880c36eb0591b2812abc0591d30710ada5e29a00ac","sha512":"734df0ccc9041e7374e4bf73aef8c480c3091563cf875f473230f9389c582c83a1af9ad3141f4b30575b32b2a2df9ff4c365b0e429d8de559afa73a7785d1570","ssdeep":"96:EQDO6EG7iR2z98Obx/Y4G7Afuk+fNtity2E7wB6crJnct:EWmBR9aCAf+fNtity8B6cBQ","tlshash":"caa18e1cee5e815cc27dfa08b4d8db6455dbda029c81dfe2885d879002ec37c2acd8e4","first_seen":"2026-02-01T01:35:54.605995Z","last_seen":"2026-04-30T10:33:35.914001Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1901,"timings":{"blocked":1579,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/neo.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/neo.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 832\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41E173EA343377381E\r\nAccept-Ranges: bytes\r\nETag: \"236A74BE24B3B74A9129F15183684CE0\"\r\nLast-Modified: Tue, 10 Jun 2025 20:26:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14918322413901528324\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: I2p0viSzt0qRKfFRg2hM4A==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"236a74be24b3b74a9129f15183684ce0","sha1":"65beb6e014ed14d566a9a2719ba391598455e31b","sha256":"c98059505f07b3f920862f96354a2df5b017b99c1adfb2f679a44671ca1c614e","sha512":"2d3d8e2a57946a394dabfd5f1dd171e1ea494aa0da826a2b6f4700b4c8a0f6a379c0733a885fb5e49d707fb7706e50eb731e32ba68e11cf170b10412280f608d","ssdeep":"","tlshash":"1f018a5296b3a62862943fe23d1ee59a86b062f310462fc5db1ba64de071c19c198410","first_seen":"2026-02-01T01:35:54.61902Z","last_seen":"2026-04-30T10:33:35.947365Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1977,"timings":{"blocked":1642,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/api/common/getMt5Amount?coin=xau","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:21.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gtcfxtrade.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://h5.gtcfxtrade.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545021=LfMmW4v9iFU6w3mpC/JFUKFs+SRqQqEf+zpIiqXS7Xw47YWISTevkQHia2H7fGW2bB4e6HMadDl+gU+xlcTjXXvpkCAqjEVvUnf0dWCWic+8QtNeEhjKGK+DbX8cbw5Y5CAPPAMiHhmo1QCZ3ZrRQkEbVeUGA/yHSaqpnPg6jCbLiGAutqIsoWnz1EHlbSDw\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ee19dddf087a5a2ec\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXdU%2B3lh7T2FriWQ3NMA22e5nfcZlTYy5dddy9b%2BCZiQW6kvalnm2WTsYXLe3qJ2zW459O%2FhR3Liyu19M4x75RFsru4fBg1D5pk7Zt2DPPU%2F5m%2Fku6G8pLDuzEhHTPDhkc9cLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dedecfe6b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ffc59149409d570b9b1c8d7984d64af1","sha1":"044a478ce2cc7994cf3169f38b200c7305579011","sha256":"4e7ce66b14e43996d343ed0a2da7a9145af42a246d4d4626e16d2ba5409983ac","sha512":"ad8e9699ecc669afa703d768d373655f2ab50693d4dfec4e0eae93ce6ec75827dd4a619dd16b71e16a2c788fe1bd032bc8390a873ec977dd552bbec52938c6c9","ssdeep":"","tlshash":"209002551c188242ac8300a69556960400243264362492484c5d512680c85b62040c58","first_seen":"2026-04-30T10:30:45.979351Z","last_seen":"2026-04-30T10:30:45.979351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/platform/dev/logo_144.png?2.0.1776775995977","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:21.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1776775995977 HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Mar 2026 11:52:08 GMT\r\netag: W/\"69b15768-1cc58\"\r\nexpires: Thu, 28 May 2026 16:02:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545021=LfMmW4v9iFU6w3mpC/JFUKFs+SRqQqEf+zpIiqXS7Xw47YWISTevkQHia2H7fGW2bB4e6HMadDl+gU+xlcTjXXvpkCAqjEVvUnf0dWCWic+8QtNeEhjKGK+DbX8cbw5Y5CAPPAMiHhmo1QCZ3ZrRQkEbVeUGA/yHSaqpnPg6jCbLiGAutqIsoWnz1EHlbSDw\r\nage: 152892\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 232219dddf089b69bdc\r\nx-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XsIgaFdaxGz2idqhLgwfwzWRD%2BbLmxckMmaR85KqRmkuEhfJXfQSVJOz%2BnxG%2F%2FUEFwKX84haJ213ntV3Kg6Q1b3USNTj5Z97aapFmPec1tAps8DAn72GfstgiuOUXD39Q3dutg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dee21837b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 553 x 553, 8-bit/color RGBA, non-interlaced","md5":"60f63ac3c41490253f1bef789a0c990d","sha1":"e5a5ec8292a50c16d2c045dd11880803a5909956","sha256":"687832ffd59ef5507eecab19f57dc6ad0fe23309b69fa95bfa087de48c1e429e","sha512":"f09f3fbf12067ca6f26289c891e6af571dda0d5024d04fda353f2b48818284d7f7645e30f02e783ddb2f26ad1b62d5bc261c7b212c2d7c1100b035e2497843c1","ssdeep":"1536:AGmTM8AieeWiygeT7sXHNN9t2K8f3q8qVZ8NMxuXJ9nxW2C/GbU/ih57QBEV9Ycn:9jmiiyr8wlfatV2NV5qx/G4/izZV9Trr","tlshash":"93b30148a4b15ea43d2d49ea3bfada0b004526d5e8b2188a930eec85c554f1dff235df","first_seen":"2026-04-16T15:48:51.7079Z","last_seen":"2026-04-30T10:33:35.916354Z","times_seen":4,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":417,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-DrVf0u3p.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:22.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-DrVf0u3p.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-1239\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 232219dddf085b99bdb\r\nx-cache-status: BYPASS\r\nage: 1\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J06G7QBiFqTU1Lc9MyETSYfVHF4K%2F8zXVts5rY7ibfc%2BfpxjvwmFrDKDD7XGd0N2y1F81IXr1rHADdN8Wg54lYX%2Bmi9U%2FYbQGmo60Sgvjq%2FMosAFicKy%2FiMOiWBzqk3jHWqRVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dee3f89cb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4665,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4658)","md5":"e55f1d441eda25bf126ac933bbe49b03","sha1":"554025347aed0e7d8b4d427c91a484a20759777d","sha256":"35b1bcb68982a8152e4e1034425631b4e8f61afd6f07600a452740cd2e011e26","sha512":"b884d162f4b2930248fe421b3a8d95bce72401a84e011fd616398533f6294fd2b49e41b360cb1c9268ff8b177267e6ab57fd0e5de425ec9ea0dc6383cb4f5c3d","ssdeep":"96:GuR+UwfW8JvYFLqCwz9XuO4YfH8Cwe1y0imVV6dSnp3hrlF3CyVTBoGuPMSTHjX:L+UwfWKYZqCwzJZtfHlwIAsESnphrrCL","tlshash":"92a1b68db806cdbea9bb944008995411255c3bfab15c44f6f3fdec0663b4abad349721","first_seen":"2026-04-30T10:30:45.985019Z","last_seen":"2026-04-30T10:33:35.955841Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-v6uZVLrh.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:22.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-v6uZVLrh.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 234419dddf086049705\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\nage: 1\r\ncf-cache-status: HIT\r\netag: W/\"69e7733c-304\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jqc%2FOnMzwU%2FyydEtfdHRgNuLLMaz1MwuQPeoGESFaec95nVdyDK9xGwGsWRSbIpOo5D4FfAN4Vo6qvGC7Z%2BU5%2FBy5NPO4uMh5SNbQOjWKd6o79NXi3lmJwPW1CQHDywGnQ7bcQ%3D%3D\"}]}\r\ncf-ray: 9f45dee3f89db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"078efc222205720077519fd8700fbcb0","sha1":"f13d3bc38252415a73cef174207e4ab271485309","sha256":"03721550765c7472c01988aad127bd53ff6821f2abf46b1889e771c324b32814","sha512":"64fe29fabc90165da4ac33130f6fce97dec0345ec316844ebd17efe42fa3cd055aff2510bffc9e3f8d9ae6e6536b8dc3d9256e4cb58ba837d3d36f0bcf483477","ssdeep":"","tlshash":"9701d0f5fd0dcfbb1fa2054051902500140a0fedfa1815e18c477e661bf0850da9f72d","first_seen":"2026-04-16T15:48:51.716914Z","last_seen":"2026-04-30T10:33:35.927568Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/celr.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/celr.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 3192\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F426B4B133239243326\r\nAccept-Ranges: bytes\r\nETag: \"C583C8D1556A1C1D4353E80B67509F5E\"\r\nLast-Modified: Tue, 10 Jun 2025 20:23:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14527963912232214871\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xYPI0VVqHB1DU+gLZ1CfXg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c583c8d1556a1c1d4353e80b67509f5e","sha1":"7fa64f01b1aeb5ccac7ee7d90782d81bcd75110f","sha256":"8799acca57d9e6fcc6d51f9ef11c88a10d836ee433f91777e0ee0c0b53757806","sha512":"1e14ffe6a0d0adc450553b73078d06ee2e8e6f6643036062fdc872af3f7b0b48a40b1c938ec3d07956d07147f5891e95a6f1f1e4bd1b5791f03e0196f38bad13","ssdeep":"","tlshash":"e6614aff3578b2b68857027d057084ac0dbdb2ad3a7232db189e4027b21c52860aae59","first_seen":"2026-02-01T01:35:54.623419Z","last_seen":"2026-04-30T10:33:35.954961Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2580,"timings":{"blocked":2248,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-CVGOuyJ_.css","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:17.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-CVGOuyJ_.css HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-4cea6\"\r\nexpires: Thu, 30 Apr 2026 22:30:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545018=lkFf+f0PFm0rL3u0K/ttIT9nP2VYtwwvjpB2hUhkKHB/wLY/5i3T/o/+m3JataDPrcHVSYhgPzfaVZE+OQvB19RAiR52qwjF1zzvFgjXEy/PhPf7GnQRKv/mrRz1kCdzpUHEHgEstRlq0+YWNItDYgy6b7OCKz5IfM8sS3AIvOo5TvwTCsF6ma8mm+MYWGMf\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 234419dddf07b8b9704\r\nx-cache-status: BYPASS\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11Pu6vqC8qFPV3gf9RqfSt0c38nKEov1LeD3hLIkGV1aM%2BKtDwMsakArHU3J6cqquOXrzcvaWchHG0HHagPb5h%2FB%2BkYedOD%2FJnw%2BSkHDiQFxXM%2BcnD1ZRb5jHOgCApGeHnvNKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dec50c68b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315046,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"001098802e457990a4b8e452cd337012","sha1":"772c9f2ced6dcc52b94c1aee605f69b2fc4a7cee","sha256":"ebf6f918fad8057259b608531da56c4de98f93cef800c5544afdb1a300f934c0","sha512":"288236c470176e404838a1ed01b29c69057eac1dc6965e4950f99f5b2068fde6f4165bf5e77f54124059f77e8474a1998f7b64c7df3d64189f44e1dd5e55c5f8","ssdeep":"6144:nI/xsaz9sKWkZ8w71ZACkFDS3vyf58rBeV05TJ:I/1WKjZ8w71ZACkFDS3vyf58rBeV05TJ","tlshash":"fb64e999a590117c6f27aa759bce5ad8f23ce5719c018de8f201200a4fc7ffa1367617","first_seen":"2026-04-30T10:30:45.99225Z","last_seen":"2026-04-30T10:33:35.913098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1480,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/api/common/getAllSetting","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gtcfxtrade.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://h5.gtcfxtrade.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ee19dddf08314a2ea\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PI8RyBH1C3Z594ZEGw1qs3SG%2FRxtDSCGChEOTOzDzyD9NiwpJLNYr1Jz7XyCB9ZBGx2jnSpAv1%2BUOA2T9eZ3y4Tn4NRRH3l4kGBPaG5YTIQV6k5SkqAyX3xlwiCoT4BBST35SA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded77effb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16657,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (16214), with no line terminators","md5":"a0fa38146e84cf998435a1013a31fedc","sha1":"37839cf061e8131a5f6813c7f74dd4e0d7cd45a5","sha256":"5bddc4b6e1f527541bf70a043fe629fbf27cc25063ae63c9d2a010b54a318653","sha512":"91943c826fe91648ad0961b0d9ca5e3b5b5ab5e330eaddd11977cf587dc0451bbdb19e5940fdd7b81716e15fa22b1d4cdc3b5fa83db282c2bbdc9ff9ca2597dd","ssdeep":"192:O1bkbOMm9yNnvyj9f6+Rb3uc2msHZPK1Z+iZNOx6WqtMJ0ZzHZgzOu2scQ59QYsC:CYS3EYudngiN2Jg/8109nJlUOn","tlshash":"cf72850d3a98cc7953c617d2d49bba98fbcc3867d8d4ec89e5a7ef1c88856b5040e41a","first_seen":"2026-04-30T10:30:45.994407Z","last_seen":"2026-04-30T10:33:35.928366Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/jbp-DygaAEDq.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:22.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/jbp-DygaAEDq.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20f019dddf085d09fd3\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\nage: 1\r\ncf-cache-status: HIT\r\netag: W/\"69e7733c-4c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OEOfjXpeg6PHD4kFAZAsbJyOkWlEQ%2FyKm6TK2YiGgpENockpmEZK0BRBm9NXwbwzQmJI0qt3T6NDvIAOyWMX0wfzwj61iU0X1QCGJrAoFX%2FWOvUnPQEOfdSMg0dTxKiDhjOrog%3D%3D\"}]}\r\ncf-ray: 9f45dee3f8a0b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a57a01499d87770e61dcfb956f60ca53","sha1":"9e2cc2bbc34952e6a52594b7ecaa72eaa2428c70","sha256":"21b70d4d5a5cefe7fda688189a36804ecf88de17baddeda2cab10a686e5d763e","sha512":"20d385ac78c779cbff88e490ad1c4a7fd992b5b6e23e26a9a1217c981231e59f0c26cc7fa06d34ae8045ec44efbbaed5e0a877d17b0472b8745e8b7ed4386d04","ssdeep":"","tlshash":"3aa024030fcc0175001011144f005f753375000c35740371500d0f54070f1cf1f0dd00","first_seen":"2026-04-16T15:48:51.63087Z","last_seen":"2026-04-30T10:33:35.91537Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo5273d43de0ad42fdbbbb975a57194552.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo5273d43de0ad42fdbbbb975a57194552.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1876\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42E173EA3433113D1E\r\nAccept-Ranges: bytes\r\nETag: \"C03BDE354C85F09A573509E62C0F082E\"\r\nLast-Modified: Thu, 05 Mar 2026 17:29:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17157027576020967412\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wDveNUyF8JpXNQnmLA8ILg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"c03bde354c85f09a573509e62c0f082e","sha1":"e24058bfbef671861bf57b6db1a1ca4e8acaa18a","sha256":"2f17ae2ae80c572b6f118a8e791726239c9e7ef10d0b6c048550aba3560c3746","sha512":"93190887f0b2ba0375f3cd6e3f1d8ce3ca7c22a1f687387e5f80c9fcf42253634ad880cdc6d3764c3412ab64e96eeb9ee3db0f8d792e8f3241001b623c1a0aa2","ssdeep":"","tlshash":"66312d433f4c05679eb82d194383755dc4a6f70185a350bfe64c657a78991190723ba2","first_seen":"2026-04-16T15:48:51.782934Z","last_seen":"2026-04-30T10:33:35.901467Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3409,"timings":{"blocked":3074,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/ETH.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/ETH.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 2874\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F406B4B133239472F26\r\nAccept-Ranges: bytes\r\nETag: \"89D27D306D73DA8CD0A69B9184754FD7\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2585520789946447422\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: idJ9MG1z2ozQppuRhHVP1w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"89d27d306d73da8cd0a69b9184754fd7","sha1":"62be7f1f7dd518f58ffb80bf3764626c350db5fe","sha256":"a4cbcb3d6f5c6591779d50c448ec254f7878094c3509d7ac8f5128ddb0e70100","sha512":"8a803901ebdaa3c21cd62c8c5d3ff9ce713b1d90e56b5a686c9475fed6f27cd4dc9c967d16dbd3088164b0bae76476c3d00f393e425151c44aded93f2fb455be","ssdeep":"","tlshash":"e8513b8ff70a6562206bec3f4413c296f2dde8aa97e95e210c9a4133125e124c2e55cf","first_seen":"2025-08-17T16:32:32.440143Z","last_seen":"2026-04-30T10:33:35.962209Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1962,"timings":{"blocked":970,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":658},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/TRX.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/TRX.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 4166\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F416B4B133239303026\r\nAccept-Ranges: bytes\r\nETag: \"A14FD22A219037E6F98685EDBC64E775\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16464605373712685259\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: oU/SKiGQN+b5hoXtvGTndQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a14fd22a219037e6f98685edbc64e775","sha1":"0ca6cbad3434e7c006c152b8995e6d67b71e2bdb","sha256":"df8bc5bf69d18addce5f0e430a2e9c8b437ac6c7e0e6380c238c5fc31d45d874","sha512":"92e30dc69e34206cf30034c2daa13c695b52ef2bcfc26b7d821c089a0a5f4175948337064e3b7759711af467734e7b9fccc198281cead7b204074c96f20d62a7","ssdeep":"96:19VqdhjQAC35Cm5ryExkSLT2X+9RQcnuNxXNp:+jHCJleExkS/2X+LOdp","tlshash":"00817d928017bcf2a0ca83360b45d2f64889c3e15a658ad27e25703f14fc16ec527bef","first_seen":"2025-08-17T16:32:32.423136Z","last_seen":"2026-04-30T10:33:35.95815Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1620,"timings":{"blocked":1287,"dns":0,"connect":0,"send":0,"wait":331,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/api/common/type/defi_activity_type","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.gtcfxtrade.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:23 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://h5.gtcfxtrade.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545023=rA/WIZm3GoHTw1u2CwwDKLiso8KKf5IlU2Fwwl4e1jbiB750BX+n3iXXnYfSQUEXLCwUqMizUnB8kYIoF1tHN7+54BOpglDcQFdPypdpEIlJJWHQj+Td8+p27rUuenX0e02iAaRZ/7bSnwBtruKUSc/B04g0RUi6D5D4JfGWf22GF0PAgKUiowatc0W5kzj2\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ee19dddf0913ca2ee\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2B7UW1D5EBnvTeu679wjzSw7lqMEd0ElRmZK4wMHnOvUXZxMCu7tsATQUGjjZSmfLP4jtC7Of5tKSj2M76IocIoUxgUV10qShR0iTUlXAitM5NooyD0rKa3Xdieqv764GsqGuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45deee1a2cb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84d9058a3a76bc0562423a7831f23cdd","sha1":"2cdb8e8fbb9b30356a8221d6ff36b1c18ee5e0de","sha256":"e6d5ea85ffe4b335328db2c265bc1a02bd2f11ac7dc25025016f28c4caf2c642","sha512":"d4082cc3c9aa4dfd804430965754016627c93657d7107ad68a75b2aba89f3fc7c870086cda8f96c6ced13ed48706e684cf8a3d7bdc72309fd1a8707677cf1902","ssdeep":"","tlshash":"f0f028143d3dcebf098f65e745ec7814299c062794a0fca058ab0f3c5ae4171048921c","first_seen":"2026-04-16T15:48:51.641911Z","last_seen":"2026-04-30T10:33:35.948609Z","times_seen":4,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/filters-YgcMkNQc.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/filters-YgcMkNQc.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-b67\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ed19dddf085d293ea\r\nx-cache-status: BYPASS\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FTr9N37JOFqkVzQU1P8fFEhs%2BPf2EXZjrG8suP2kqTgOZ%2BFH6CRRd%2FYSmK%2FxvDMBh3uZ884tMdN5vkxz2G78eU50%2Bt0Gbdm42sUC%2F3DJL01mXTyIkZHMRT7djrb2eVamGJAPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded7bf0fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2918)","md5":"b7c941d042e9f5fcdee8943a1f8a9256","sha1":"9708c19c31930866ca89ae8e9fd558867c4b9a2b","sha256":"2b49d98b28dbb06cfdf96ba53c9a916f935adaa59f5634905dae1e1dc542c37b","sha512":"08165af0245aa38e03e3f2126b862f486ea705ea0aaca60b84c8b86adfd62035d509c37e198780090bc4787b559006358f9c74d80a43da143f664e5b39a30638","ssdeep":"","tlshash":"045132edf8d3a13347ee5ef944188524b18e7e14685e4a0df54be0416b63888e07bb64","first_seen":"2026-04-30T10:30:46.00059Z","last_seen":"2026-04-30T10:33:35.923377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo32c94a8c4cfa4eb5a6c4dd850fbe3a3f.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo32c94a8c4cfa4eb5a6c4dd850fbe3a3f.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3913\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42D72D2036355CF0F8\r\nAccept-Ranges: bytes\r\nETag: \"D89278E2EB6FB69FBC0F8897DE9D6E59\"\r\nLast-Modified: Thu, 05 Mar 2026 17:37:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11970061227549429446\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2JJ44utvtp+8D4iX3p1uWQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"d89278e2eb6fb69fbc0f8897de9d6e59","sha1":"8ee8691910f02cf3a02e55d708555f86e2752e2d","sha256":"149e739390e69804ac42171a9406cdd20c5bc8f3b4b21a043afde51b937b06f7","sha512":"b831551379160608b562f75f170898681694e50cd0b1ad5567c91665820f8aff51d11ed74ad3238e2340035a056da9daa01abdc86f27a68b12a27bfc368fb2cc","ssdeep":"","tlshash":"d0817e233538117dfae371abdd6959681631025ac748f9c621d314484bac37fc3c2ae6","first_seen":"2026-04-16T15:48:51.754816Z","last_seen":"2026-04-30T10:33:35.924323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2747,"timings":{"blocked":2412,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/LTC.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/LTC.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 3431\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F40E173EA34336E361E\r\nAccept-Ranges: bytes\r\nETag: \"2FB04334226E4A4B5984AE3C03C28F8F\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13558784043475154853\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: L7BDNCJuSktZhK48A8KPjw==\r\nx-oss-server-time: 20\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2fb04334226e4a4b5984ae3c03c28f8f","sha1":"a12536b6adb34c5ac46df7932bf4eccdae386759","sha256":"e45379292f8ce4999fcfbdc7a36a89310b1395f84522171a45d06aea432f74ed","sha512":"ca752f5ba32996da77031757d98515dcc6c300a5a1615daa0af06e99b75dfcef5878fab292b6cbbc06da86c8d8cc7b09d077597685e78cd9a41a47201dde9247","ssdeep":"","tlshash":"43614b700a1ba836f6595c2dee44236f939539ce0b82079acf25c83531a7a95d4dc8db","first_seen":"2025-08-17T16:32:32.427585Z","last_seen":"2026-04-30T10:33:35.904621Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2001,"timings":{"blocked":984,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":665},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-D2sW8kTX.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:21.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-D2sW8kTX.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-fda5a\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20e919dddf085dc8f07\r\nx-cache-status: BYPASS\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8S6pPCWxF11Rf6ZvCcWSbGkqPkABq3AlfOZBpYwTgtxSSAogzhHfgDUeRBTysdls2c11WyqfLcd9FbNjdhQa40JAAHlZKg5o7hqtwnRm6SUywYfbbftRZVVbx21Sw8PJOCOJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dedd6fcab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1038938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2ecb3e6a29c97705e257c67b61b95d19","sha1":"de4afa031882dcd4537dbae454a5b7caf2e48738","sha256":"16eaf6a3ca5bbbe911e5bdfd153825286b7883235d05885c93e7c3822b4fe9a4","sha512":"3b9c00eb3e384b21f7f5d2634565863c052f34fc71378fa637a31ed393b5776ac1e941756d1d33e32382c6f9045a18d424ab1f841a0f4cd5201cf35825f45dde","ssdeep":"12288:+Rod822GJWsKC7hekFlQVju/k+kkRbMInEW0fvl/lIvtWEAJGsqsnsXDG:rZrN+o/kIMOEWUlUAE+GsRnsXa","tlshash":"d525199cb614b03543a731b4057f090f933a680db54b85a8fb69d4ea6cbd44e227bf78","first_seen":"2026-04-30T10:30:46.003636Z","last_seen":"2026-04-30T10:33:35.966734Z","times_seen":2,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":632,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/platform/dev/favicon.ico?2.0.1776775995977","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:21.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1776775995977 HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 14 Jul 2025 14:12:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545022=jq7S9xtpaCGlOcqMXXrTqcU6fmEEyjeJ2ID2YyCkCDjVkMJEGCvBHHVCUFMtFwY7YHaKzKBMALgOSi2LVXSQb0R+NadACvPjFk7sir+ZKPbyQXUZESPMiPEIpz1EzC5PMuf7J7zhHyqsGUhcf6EbkAFOM22fboWlr+M1YSgSOTey1Vji1F+pXkb15hzMW9V8\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 229c19dddf08c2e9485\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68751066-7f4d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cML%2FlfviRqaxJGI%2FcXumPReN5C%2BBVtYsqagDOGyKCRwtbCEndwrjRkpcoFHDyIlaWpYjv%2BJcchNfvH%2FYcE6KaWxdv4wjGstyGOW32IKIfQsDMVBnj8VFwYA7NhMBECjUuVVaxg%3D%3D\"}]}\r\ncf-ray: 9f45dee21838b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32589,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x-99 with PNG image data, 256 x 157, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"d02b17be46d74f7e09633aa923b3351b","sha1":"25e7b584dec82f9b9a2fe3b77c50037dab18dd3b","sha256":"842aaa90e7c48ff93b15783af1b99752a848488cdce7a2781e31dd8168d99ea7","sha512":"2baaf48d27e3a8adb74142f3ddf2636687fac652620eded7313f224752b96c88c29b5d0123e6d1852e6d082ed2ad497a3ad9daedfcfdab348f8195268ff9ffdd","ssdeep":"768:MWwZwz73qqDlyUYbnxITObS5IBXoH0cljkM75Rht1q7JdDRPO03:nwK76qDlhxqb8IBXeoM1R1QnBf","tlshash":"26e2e1e7878142c44d93a08d59fad738e7e5fc6f678f9ac88246f48c4244128dcd8a5f","first_seen":"2026-04-16T15:48:51.660161Z","last_seen":"2026-04-30T10:33:35.965787Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1062,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echoa8bfec2582bb49b58b4f7247570a89a4.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echoa8bfec2582bb49b58b4f7247570a89a4.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15367\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42D72D20363556F2F8\r\nAccept-Ranges: bytes\r\nETag: \"51714ABD405D2F90537F4A16353102BD\"\r\nLast-Modified: Thu, 05 Mar 2026 17:31:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1911483555833643205\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UXFKvUBdL5BTf0oWNTECvQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"51714abd405d2f90537f4a16353102bd","sha1":"9ad876f43389fbdc6c76ed088bf961574c04047c","sha256":"38fe3ae2e9e588d25a7c788631a8e3e8da3653b38796ae712b6327b852a75e17","sha512":"bd577dd063b2e36d27a675f6b3663b85355fc3a67819aa28c6fe1f85a5b075763ae3038675231fc9cf79ddb066944af812b8ae9b211745d044abff441b6569c8","ssdeep":"384:YQOon5eKr/C6cIr+vsNmYAoKGIpTk8R+8S69tg:mI5eK6xsJNIpAIPbY","tlshash":"bd62e1c14bfbab96c0a5b91d06de03c4ee21ac06415aa314701da98b2b70eeafc4d573","first_seen":"2026-04-16T15:48:51.711348Z","last_seen":"2026-04-30T10:33:35.932052Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3414,"timings":{"blocked":3068,"dns":0,"connect":0,"send":0,"wait":345,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo93e49e030cf64efeb71ce66169d94bd5.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo93e49e030cf64efeb71ce66169d94bd5.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13173\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42385D5B35357B4A25\r\nAccept-Ranges: bytes\r\nETag: \"9F208FF77248507B7CFEBEA96723FAFF\"\r\nLast-Modified: Thu, 05 Mar 2026 17:31:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2910247905930343876\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nyCP93JIUHt8/r6pZyP6/w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":13173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"9f208ff77248507b7cfebea96723faff","sha1":"7ac1aa5271bc9af7b3c30baab9e329700a41d50f","sha256":"b2a9ec80550966dc8856e381a0862da90764a951c770cb9effef1e737b1dfeca","sha512":"303c0e434dda6496f74fc688df5431068034f228dccdc72f9abd77b306e7c7969f4943df4e175dc41b487c18ab5a722f35d096814285621ce60fb25664b14377","ssdeep":"384:YYFwhVULt1A5595I1BzICHDm6Bgx/9fLANgO:R7L7A5lIzzn2zANd","tlshash":"e642cfb3431acc3237ad07f552f6ac404c446daa2b9d384ed2be9805116a1d78fad2cb","first_seen":"2026-04-16T15:48:51.717995Z","last_seen":"2026-04-30T10:33:35.93859Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2780,"timings":{"blocked":2430,"dns":0,"connect":0,"send":0,"wait":349,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo9507077f3c6b4a31a67ef79b5eb36da6.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo9507077f3c6b4a31a67ef79b5eb36da6.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4393\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F426B4B1332393B3426\r\nAccept-Ranges: bytes\r\nETag: \"C532BF80440EB4B8F4FC1972D891C238\"\r\nLast-Modified: Tue, 24 Dec 2024 20:09:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12497449432744235679\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xTK/gEQOtLj0/Bly2JHCOA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c532bf80440eb4b8f4fc1972d891c238","sha1":"58a3fc8f1423786c277c1f49c25735a1cb51e7d3","sha256":"1fb84dae91d57309cd53b29e57b476e8573892a20f52e541b1426f7217f94440","sha512":"76452fb1cce6a00426da5755d435e167d0acb968fe73dd71da619efc20f996c37d9ea86dce83e0eb24ad5dfae4c8bbc324848ed00f6dd65167502063b8b7e7e7","ssdeep":"96:6t+MuEdOwYatUA+wp91XZr4DRyj8edU41cljunlclNHHd7eAZbafI5:6t+M1ysUOLXmNyYey6cljunlQCARN5","tlshash":"8b918db2cb58a4e9a9a0cf4e6ffce185414822c7720056f775cebd941c90f7f122aad5","first_seen":"2025-08-25T09:00:26.55323Z","last_seen":"2026-04-30T10:33:35.943396Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3009,"timings":{"blocked":2676,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/charting_library/charting_library.min.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:17.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\netag: W/\"66cf2f74-2a6b\"\r\nexpires: Thu, 30 Apr 2026 22:30:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545017=OnC7qSkMoZ7zHIlEfP0e23jddhzK5Sy3OKM/S4WaD9BcOdBDLj4GUe10Ny2OeCElxN3gQrIa5AtdyWC4I4MF15cM/tL55KKbqKzhKN4lPNogVl5jgNGksx87vTcZ9OsHbmPzbMAcmgHoHk0Kg9rKwiWHmmX+i3kG3HgqggohyAOc30fBJNbAEazWbxLxucsF\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 28f119dddf079fc9d55\r\nx-cache-status: BYPASS\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbKngK7a3Rzb0viQGqKwA0tRkxGp4z4zEBIrRT3lyETeR1veKtJvnENljD%2BrGS43wtJfJHyXIWxzlhhXTruz8sxSqXSY5qupL7hEGHdSldDGovZNZPFWeVqYxpT8Ih0j9goTgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dec4fc64b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-30T10:35:31.036365Z","times_seen":924,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":860,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/filters-YgcMkNQc.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:22.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/filters-YgcMkNQc.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-b67\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ed19dddf085d293ea\r\nx-cache-status: BYPASS\r\nage: 1\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JfnFt1hTaQ89bPGNqmdjFP%2B%2Bz7LKTSnOmtW8tHOWchIApkVOPqdNa8j56mgGkhKtcUBRNXTc9WlL29su%2FiCNYXZn8S4EoaSuYlGWsKHijOlnQ1BIPSmXVfLJWRyTyXC7P20eGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dee3f89eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2918)","md5":"b7c941d042e9f5fcdee8943a1f8a9256","sha1":"9708c19c31930866ca89ae8e9fd558867c4b9a2b","sha256":"2b49d98b28dbb06cfdf96ba53c9a916f935adaa59f5634905dae1e1dc542c37b","sha512":"08165af0245aa38e03e3f2126b862f486ea705ea0aaca60b84c8b86adfd62035d509c37e198780090bc4787b559006358f9c74d80a43da143f664e5b39a30638","ssdeep":"","tlshash":"045132edf8d3a13347ee5ef944188524b18e7e14685e4a0df54be0416b63888e07bb64","first_seen":"2026-04-30T10:30:46.00059Z","last_seen":"2026-04-30T10:33:35.923377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-BXGi3NQq.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-BXGi3NQq.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 273d19dddf085bfa32f\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69e7733c-1af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4E6SHXRhRB7DzaBIZJO%2BzPTaNmqCFp1otte7o6L1xKWMFNCRcGVsqV4OO8S5AF7rrBnRpkFjZXrXVnn8dMRlM4juVX2z9HpRi69EEo1i%2FGXKpvdfOg5LKT3mHa%2Bikymfi5V5g%3D%3D\"}]}\r\ncf-ray: 9f45ded7bf0db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (426)","md5":"49d0c199ca14a0880ef041a6c6fc82df","sha1":"166947ac07d62ddd92c186ec25aca5db1492b8f1","sha256":"e031c7dbdae7876b63c46e50de92e4efe977c77c3fcc5564a82c4e192b26925e","sha512":"ec2527331d99cdfa930619344895068ff75e2b880b515f7a9f461d33baa5140f1e29ddf668856a57bae2de0ea191c8eecca69ec7b7fa33a5fd4cba8032d6f7b1","ssdeep":"","tlshash":"45e0ab1ebc45cab309975844e33d0a000a2e46c84335a4e117b816380396dedb31df2c","first_seen":"2026-04-30T10:30:45.949601Z","last_seen":"2026-04-30T10:33:35.941229Z","times_seen":2,"resource_available":true,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-DrVf0u3p.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-DrVf0u3p.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-1239\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 232219dddf085b99bdb\r\nx-cache-status: BYPASS\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BoAvCFGXBjJaueRb0DJJ8OA5QviUQrl0gZkugneqAYNjKaQgd21hVapuL7Y9hoLIMBPmdARSZYtnsKV3eUxmACYMrbQSU%2F4Kwf9j%2B2mxvo2oyZnLDbIuUWX3xesPXR9H4CImYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded7bf0cb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4665,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4658)","md5":"e55f1d441eda25bf126ac933bbe49b03","sha1":"554025347aed0e7d8b4d427c91a484a20759777d","sha256":"35b1bcb68982a8152e4e1034425631b4e8f61afd6f07600a452740cd2e011e26","sha512":"b884d162f4b2930248fe421b3a8d95bce72401a84e011fd616398533f6294fd2b49e41b360cb1c9268ff8b177267e6ab57fd0e5de425ec9ea0dc6383cb4f5c3d","ssdeep":"96:GuR+UwfW8JvYFLqCwz9XuO4YfH8Cwe1y0imVV6dSnp3hrlF3CyVTBoGuPMSTHjX:L+UwfWKYZqCwzJZtfHlwIAsESnphrrCL","tlshash":"92a1b68db806cdbea9bb944008995411255c3bfab15c44f6f3fdec0663b4abad349721","first_seen":"2026-04-30T10:30:45.985019Z","last_seen":"2026-04-30T10:33:35.955841Z","times_seen":2,"resource_available":true,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/logo-3-CH45XDFG.png","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/logo-3-CH45XDFG.png HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-5c08d\"\r\nexpires: Thu, 28 May 2026 16:06:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545023=rA/WIZm3GoHTw1u2CwwDKLiso8KKf5IlU2Fwwl4e1jbiB750BX+n3iXXnYfSQUEXLCwUqMizUnB8kYIoF1tHN7+54BOpglDcQFdPypdpEIlJJWHQj+Td8+p27rUuenX0e02iAaRZ/7bSnwBtruKUSc/B04g0RUi6D5D4JfGWf22GF0PAgKUiowatc0W5kzj2\r\nage: 152658\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 273e19dddf090ac9aee\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6roFHn%2FVKJGoP9V6NK8gzkIZHEKaoiolLeegwR8%2BZBhr0M5R%2Fzwrwe4fx5yQdPHyMUDZ5jC0IQiJwoB4zboHSM%2BQysz6yxoq%2FSwoUY8Df0q1qBskFQY2B7hqWn1seJgfM7qxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45deed4a0fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1040 x 640, 8-bit/color RGBA, non-interlaced","md5":"b5bad5f159543df96c0ff461ec7c83b1","sha1":"872c200619c0224f92a98daeb97882418e2308a8","sha256":"27a65fbe25dfd5372361d9e0bf4a2449db0ff6160392219dc0ffbe6f6ac296a3","sha512":"f1d22370acbea3aecdcef00e9653abaa602013432fdeb3df6764a1e6b256813ca991f1d08af071504c7be9cb108dacecea06263458e405a64b529b2af39f5ca3","ssdeep":"6144:zZFxvJ4Hh06ezvlwdGcsFjaSYhYFAruTEeI6Wf5RXofpV3dz+cDsz1wzUFFIFZNp:/oBfebuGzF+nYOo86WBpcVkb1gCI5p","tlshash":"7a8422336df5b533cd6b8e3a4d5503207e4a941188eb1dbdb6087bb99656079ceb300b","first_seen":"2026-04-16T15:48:51.713164Z","last_seen":"2026-04-30T10:33:35.946329Z","times_seen":5,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/arb.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/arb.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 5480\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41269DA83534CD66F6\r\nAccept-Ranges: bytes\r\nETag: \"F2F9837B30261DC3C09C37780BA0D4A4\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6106130190962819897\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8vmDezAmHcPAnDd4C6DUpA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f2f9837b30261dc3c09c37780ba0d4a4","sha1":"6e966ec286a0a2600a4b08a64a643b64b1166b3a","sha256":"72b81e3b7cbe58e8af38dfa50fc409d87aeb12eea08456d53423e5580efc4464","sha512":"0b7c26fe388ac2d48ac4145da936509573bb5439b05848ad9653710e58ae5f65d5b57f015e9ecaffd54d0b4771dac7830cc4cde26a2538585b2fa90a85b6b906","ssdeep":"96:261WZ9CM9NVWxTAm0EFD0AJN+vvSRNlLNLzswOwm07GOhNSNxG5q:26WjCMW9t0mJN+HW3L6HwmChwPG5q","tlshash":"17b18d7cad781c58e0548ec7238ae50851394d50aa7f5c0e34eeaf3a00795be54bbd6e","first_seen":"2026-02-01T01:35:54.641109Z","last_seen":"2026-04-30T10:33:35.912528Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1648,"timings":{"blocked":1308,"dns":0,"connect":0,"send":0,"wait":336,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/ksm.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/ksm.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 356\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41D72D2036354FEFF8\r\nAccept-Ranges: bytes\r\nETag: \"1FB6BAC03A42C193175C814900DB26AC\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8748501949415376939\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: H7a6wDpCwZMXXIFJANsmrA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1fb6bac03a42c193175c814900db26ac","sha1":"5f5edc5f1d2c8bc3a88dd5e7710885fd5b68e04d","sha256":"d798a8b73e0277336ec8862a136d6bf8153606d9ee730d24241ca507dc5079e0","sha512":"aeac57a5d1f6d51970c32c436bae9575d3ba4404b765b406230ba09963733e6013893d7ff98f25ee53ac5f4315f4cdb3c9886bc453e90a8ba1f456ff94be9f56","ssdeep":"","tlshash":"16e0c010569e00e246ec51da4134511592db4283ced9ca1236d2bedd9ba905e2a1b87b","first_seen":"2026-02-01T01:35:54.66219Z","last_seen":"2026-04-30T10:33:35.922499Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2299,"timings":{"blocked":1964,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-D2sW8kTX.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-D2sW8kTX.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-fda5a\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20e919dddf085dc8f07\r\nx-cache-status: BYPASS\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=leTZ9O2hiwA%2F8lhUeMX0zi2DvPFcRknWFhjErtDSiuUNJJCiA7%2FgRaxQBGu3xzRMdVY3wXfzDRZI5XVwKg2tFJjd4mKJgFF%2Bh%2BCeYJSL0neAmbsILIcSCL3PjDH59fvP7YIx9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded7bf0bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1038938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2ecb3e6a29c97705e257c67b61b95d19","sha1":"de4afa031882dcd4537dbae454a5b7caf2e48738","sha256":"16eaf6a3ca5bbbe911e5bdfd153825286b7883235d05885c93e7c3822b4fe9a4","sha512":"3b9c00eb3e384b21f7f5d2634565863c052f34fc71378fa637a31ed393b5776ac1e941756d1d33e32382c6f9045a18d424ab1f841a0f4cd5201cf35825f45dde","ssdeep":"12288:+Rod822GJWsKC7hekFlQVju/k+kkRbMInEW0fvl/lIvtWEAJGsqsnsXDG:rZrN+o/kIMOEWUlUAE+GsRnsXa","tlshash":"d525199cb614b03543a731b4057f090f933a680db54b85a8fb69d4ea6cbd44e227bf78","first_seen":"2026-04-30T10:30:46.003636Z","last_seen":"2026-04-30T10:33:35.966734Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1115,"receive":631,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echof57d96eba3624c1495075d74febf5cc9.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echof57d96eba3624c1495075d74febf5cc9.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2523\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F426B4B133239493526\r\nAccept-Ranges: bytes\r\nETag: \"28597515F2E1DE9FF0AA28E125A75CD0\"\r\nLast-Modified: Thu, 05 Mar 2026 17:26:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13951145874519314879\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KFl1FfLh3p/wqijhJadc0A==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"28597515f2e1de9ff0aa28e125a75cd0","sha1":"dfd2ac81b16ebb3baeb5e34634db8081f00a280e","sha256":"dfe845f0b302565703e51657db9ed211c697060821f1fe80f4eaaa01acecffbe","sha512":"5fffc03b9b1f567663abf75c103634dfd11c073d2f67c3f8c77bc5bf63b82b9f2818ebd655815825a08647f9b0bc63158479c5d60a1f95a5797b3b30c5c6a9bd","ssdeep":"","tlshash":"96511a67dde09038dd92f93f11595acfe90e2c89240e99ac08c9e6006663d6f5c587e5","first_seen":"2026-02-01T01:35:54.607188Z","last_seen":"2026-04-30T10:33:35.941843Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3353,"timings":{"blocked":3022,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/BTC.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/BTC.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 4273\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F40576758323564F04A\r\nAccept-Ranges: bytes\r\nETag: \"5A17D7DD940B42FF552EDDC735BE864C\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17815574697070989516\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: WhfX3ZQLQv9VLt3HNb6GTA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"5a17d7dd940b42ff552eddc735be864c","sha1":"4841e0487a3f776b9ca9ede921f2c8026a7e3ae0","sha256":"21117886628474431d75e9af81b08956b5e2fd4003d0b335007018b08e9b36f9","sha512":"4a3afbad0562a15faf0b0403fcb72f8102c70996b5b526c4c401b8c45a3d5df42d319b7de19000abc14bd083df3a2ab6e6a0f82bef2cc73ea8c87a4c61d1d491","ssdeep":"96:QbHYpQ5DxK/tr6ehlp5vAmXrDbpK1Bh/Abs0:6HYK5g1r6U9B7puV0","tlshash":"97916b2f1a59067d2ac1dafe7d76088e0403eaad883a154a5da4326a3f12ec9117a3d5","first_seen":"2025-08-17T16:32:32.363956Z","last_seen":"2026-04-30T10:33:35.933487Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1908,"timings":{"blocked":948,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":638},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/BNB.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/BNB.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 3858\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F40385D5B3535A74625\r\nAccept-Ranges: bytes\r\nETag: \"8FF685201629CE337DCB0DE05F90200B\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16498479837422910824\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: j/aFIBYpzjN9yw3gX5AgCw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"8ff685201629ce337dcb0de05f90200b","sha1":"f966bfc55f74657da7b2c385f2d1747be8592c7c","sha256":"2e78741eaa9725cf9bd943e1b7d6daa52d2d99fa97f7be6dbce77c38de23129b","sha512":"c03bb17cd5043f6cbb69b1111ccb5cdd63d31da8a2627c63a222a45c809e6aab54c4aa9f02fe3622e3310b16764d70f89ec8768d28d4c1501d0093a2d1f11e30","ssdeep":"","tlshash":"41816db4d7aba5385564252bb6c170f85fb12798d69f70ac047c9d0a3bed10139105ac","first_seen":"2025-08-17T16:32:32.378667Z","last_seen":"2026-04-30T10:33:35.910076Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2015,"timings":{"blocked":996,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":677},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/Solana%20%281%29.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/Solana%20%281%29.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 4369\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F40D72D2036357EECF8\r\nAccept-Ranges: bytes\r\nETag: \"9DFD8915A8FEF2CF7FAD0092293672B8\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16756976339921801266\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nf2JFaj+8s9/rQCSKTZyuA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9dfd8915a8fef2cf7fad0092293672b8","sha1":"98a5adb6bcf4e57a3ea076306f50eba0cf92f9de","sha256":"09956c353e9ed57866b01783c2d36aa57aed5e0e425c82ea65e2bbc8856bbc3f","sha512":"1cca7e239cbb157a9a7881ae13b47e23dcccd57eee4db988f3b9d95fb22a60b41d64ed5678fcfa298a059524959a4a7996f98531c711a37cfcb06b6d87c119f3","ssdeep":"96:R6tjWfpzfF1zdInsRE2Mfpb/J2SyXu7ijyHE58g5oWdsZlv7:R68Bz9wsR7MfF/JF7if8gK3lv7","tlshash":"ed918ec4dc6c5326e06f973365b7433b89c02779c471b8114af24a674a013cd554f95f","first_seen":"2025-08-17T16:32:32.396649Z","last_seen":"2026-04-30T10:33:35.94001Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1993,"timings":{"blocked":986,"dns":0,"connect":0,"send":0,"wait":336,"receive":6,"ssl":665},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/DOGE.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/DOGE.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 14157\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41576758323569F14A\r\nAccept-Ranges: bytes\r\nETag: \"F429EC666A2603E4D51685B9F54AF4FE\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 938454903449122779\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 9CnsZmomA+TVFoW59Ur0/g==\r\nx-oss-server-time: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":14157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f429ec666a2603e4d51685b9f54af4fe","sha1":"443f7ee2325d952cbc00cad16cea8455bcd332c0","sha256":"ebbc3184799685d880adbcafc571a656b239cbedce857183bd696bcf870b50b5","sha512":"bb84869b136b9dc5cfe005f1f5c53850eea6e3a85b7b43bedd1838e0e1c5a0d246720ca18ddded7735fd96e8b2ad017806131157d5e2914ab3b48ab40043db47","ssdeep":"384:1thyi9pmdtrXwcvX/wRl24n3oodJG9I+4Jc8SKg:1tj6hwdYodJG9IbW84","tlshash":"b452c0c77f5c8121ea3b823717d3a0adb4bd659d29f77ac40c990b06358173d40624bb","first_seen":"2025-08-17T16:32:32.420765Z","last_seen":"2026-04-30T10:33:35.920418Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1595,"timings":{"blocked":1250,"dns":0,"connect":0,"send":0,"wait":344,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/mana.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/mana.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 5850\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41385D5B3535A34725\r\nAccept-Ranges: bytes\r\nETag: \"4D96289FF69B4290F8D883DBAEF25ABB\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8044485260918622410\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TZYon/abQpD42IPbrvJauw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5850,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d96289ff69b4290f8d883dbaef25abb","sha1":"e03a0d2cae6a00a14a9cdfb351cc87be77448f30","sha256":"87f61bd8016079ecba3a90962fac11823d333c4f195f9f8e74f129e1d7bb94d4","sha512":"94417bce81d44cdf60b673e9511dd703dc3ca8b3c50f047e29d9965eda1a76388d94d17c2e538fb5f9b69cf47a6016c2856bdaa0c79c8600f59cd1a41ebc5b55","ssdeep":"96:NNfrMJnbSiVLJNrq4OmxoTKTWbxdcyX8DjWPNJxiYvMacuAieGuC/:vfSnbSiFJN2YjTWdFBNrBYs","tlshash":"dbc19e92bbd327c1e63efc2e728993ccc8411e1412d19d612618493dee68764eecd6a6","first_seen":"2026-02-01T01:35:54.656937Z","last_seen":"2026-04-30T10:33:35.920912Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1664,"timings":{"blocked":1319,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/zec.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/zec.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 4135\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41D72D20363586EEF8\r\nAccept-Ranges: bytes\r\nETag: \"CE949506FF9119891FD067A98A738AC5\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4365743626282316159\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: zpSVBv+RGYkf0GepinOKxQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"ce949506ff9119891fd067a98a738ac5","sha1":"f2f17b27f81cefa33c4f2db5cdfece244509bf46","sha256":"cdedc732781d947ac35b425d87ae5dc4530a4b20763890670a34ace6378ee966","sha512":"37072887ffb9234dee2447daeb2d6dd3ec4bd02210333126a3e64c89fef2acf5b361ac10a64fed7bd5f534c6c2e54665fd03f9f5473c2c00ec9cd473dcfbfab1","ssdeep":"96:Xl+EyjZMcTIw0mFJUynb8gpm2qfgFyDnBi2vwqqaQ0d9:XlVyFMccyFJVlqfTDn6qqa5j","tlshash":"8f816dcb78c9dd03900cdef7635bcc9c84a519e45a9d81d05e0245e16b6c0be585eb7f","first_seen":"2026-02-01T01:35:54.65127Z","last_seen":"2026-04-30T10:33:35.959581Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1975,"timings":{"blocked":1642,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T10:30:15.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 21 Apr 2026 13:41:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuX38vDvBRpeb8e5K7ajMspwjUrOvWdiz%2BPxrxUr4O3n4yOad3%2FpfphT9LL3ufEc89ySUzGjcK01hSD4nDLJ9ikJQ5cYRyDuG0qv8jF7vPr6GR8QWPkI5ypWX6quJ5K7loSrdg%3D%3D\"}]}\r\nserver: cloudflare\r\nl-safe: 1777545016=C9/h5GJrIJ3u6s4ANHCBKGTVxEYC9IOUCORSklYR/wxT+2H9wR0RxipkwxJ1x5jR072r7nsUyoX20HQi4qaOTVidvGG0JOrpOvl0p5adf2Ll/qCg0+SpdNI0QOMfTsep0JOEcVAv5uePqIcZrefy7HeSdbaT+zbepV1LSkwzfk6uR2yqLMKgFWrqjSNPGCSY\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ee19dddf075d1a2e9\r\nx-cache-status: BYPASS\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f45debdce124e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, CR, LF line terminators","md5":"741f72c6adb5ee105889dc96ef8e69d0","sha1":"0f4421d7dbeba5ac6e04aebf6fba26fcf2f9b666","sha256":"5da23bd97d355e04d765f7bde5bb24fbdcf1a5cc9f311b08d64dd4ef36d09ca4","sha512":"0fe8f352f94569d69243e6028e15b63efeaca9eabe6d78ff27fe62630675eb40b4a3a5a59aa20d1ce5b47375a14d6f96d957b0693244e1c58db14d08546badcd","ssdeep":"96:+r82Gsf53uSPEaq3Pt/7sr6TCZydHRH/gg2mUsGKAiowGmuB1niHqiH9H/2:+Fn9PEBOZCxf92nfD3bmuB1niKidf2","tlshash":"50b14fb35ca0882a3371062aeed7f018dea16693841d4810b5cc40ee9ff6fd588dbb65","first_seen":"2026-04-30T10:30:46.023549Z","last_seen":"2026-04-30T10:33:35.960556Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1053,"timings":{"blocked":54,"dns":38,"connect":1,"send":0,"wait":945,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/api/common/getCoinList","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gtcfxtrade.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://h5.gtcfxtrade.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ee19dddf08318a2eb\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvQ9Gs8LyChISUSzcKt1045rwgAKRvnEVMwwOJEGNQ7TjErBw8Ku2bxRsVasDvVhPXdUxUSTjsUxT3D%2F2oSsUIVkr6rp94YNr2vA95y0xMSrtFfT9%2FeWd%2BvBTwd7k624Iuc3kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded77f02b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263249,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2b0a7793655d0120668245b6939f3b5d","sha1":"f4b6899af2bfe19aec910e0f39f91728e41537f5","sha256":"1ea947de5dbba4073f9d3be7362e3a6aa3175e8cef8d1abdaa30b915554c1832","sha512":"dcf1e23ff8b29e0934975ebd19f85979cf9e7ee1603600bdf155eb99073810410d4a415861334bebe5f46f6afdfbebf675661a0ece8f543b643e71918d21370e","ssdeep":"3072:/Ca8TuogClBy/jrp1ODOCqDJ5aIHGT8T6k/UBW3CvGxvTqv3aeFwhWZySt4FlFrz:KasW2afaIHGTo/UBW3CFqqtUgQCcNOvA","tlshash":"8944f1c863a95d69c5e955c10d5f7dd3318d32df98ca8e1a97e8cf4881e0db7330aa0a","first_seen":"2026-04-30T10:30:46.030678Z","last_seen":"2026-04-30T10:30:46.030678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":919,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/currencyItem.vue_vue_type_style_index_0_scoped_54ccabc9_lang-1sQaPn__.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/currencyItem.vue_vue_type_style_index_0_scoped_54ccabc9_lang-1sQaPn__.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 273e19dddf083419aed\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69e7733c-203\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aug7GkYIxlgXcLhCC0pBQnhJ5pZXPRdTmUoT3IDFmBL3FwMht%2F2%2B41VcwSxGqMmdpPPLe0FzKQ%2B93CEavJDKmcGfm%2BfwqAqUFVUqe9dYTS6yf0H6TEkfMwalUaGxQ%2FSwxyYJ4Q%3D%3D\"}]}\r\ncf-ray: 9f45ded7cf10b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (514)","md5":"515165bd3c0664d40fa94eb41ef632b7","sha1":"8f0e7150cf7fc9d45e4a5b0775a05fa991431ce3","sha256":"5bedbb279958f88c7fbbeaa3f1595d0efeb15f814fa572ced7eedaa16ce2c78f","sha512":"7bca74b6b1a6a335410582775305c9f609ae0e42ea647b181fb8d38bc119bfdf9e915403b9a1832d45f1e7826921b8f481b8c8863f8f62a55770b47e13df7c3e","ssdeep":"","tlshash":"3cf036465acc53bd2a72017a4f9b3e6522f704994afd52b5254e4f38476a3074e27702","first_seen":"2026-04-16T15:48:51.624277Z","last_seen":"2026-04-30T10:33:35.937402Z","times_seen":4,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo1de04e1501f04725944c784b58503c3d.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo1de04e1501f04725944c784b58503c3d.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3142\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42385D5B35359D4B25\r\nAccept-Ranges: bytes\r\nETag: \"681FA6B19DDC9081C3DEB8A402B98EB2\"\r\nLast-Modified: Thu, 05 Mar 2026 17:37:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1470616459672488028\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: aB+msZ3ckIHD3rikArmOsg==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"681fa6b19ddc9081c3deb8a402b98eb2","sha1":"4672795ce322f70aa029bc59214675bc58cb5b73","sha256":"7da0b8ee56097216326280026b73db73384e5973d9c698760f023034249a85e8","sha512":"0d26e65128e1e8d9af71395bec2621038a43c636219e5278f63f90260432f5a4d29953e60ba408358a5f5dfbc10ee56181d1465fba3d62d5df07567907264be3","ssdeep":"","tlshash":"82513ceb673c5b28c4d745778e9f023ae0b58e85d44279cf28599007d05a241c1c6bfb","first_seen":"2026-04-16T15:48:51.788984Z","last_seen":"2026-04-30T10:33:35.957541Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3143,"timings":{"blocked":2798,"dns":0,"connect":0,"send":0,"wait":344,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/AVAX.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/AVAX.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 3561\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41385D5B3535944825\r\nAccept-Ranges: bytes\r\nETag: \"2A0A20FBDF21D328C6E62A909F76A3ED\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 426982309358840863\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Kgog+98h0yjG5iqQn3aj7Q==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2a0a20fbdf21d328c6e62a909f76a3ed","sha1":"6ef394c73f2ffaab30b2c3ec701f966a209f1690","sha256":"2c4162389c6741d7d25ef0c448fd1a340f4d9d372ba90a25faa35f4277abd6c6","sha512":"8117af049dcbdbe8a3053544300c4f9fb513ebbc1a21ff2ab4e95d581bb8c628a9a2e3b7dbf9b5f8388c536f5d80972e4dd542ab9fd370cb4e82332781566ed2","ssdeep":"","tlshash":"69715be743633e5beb6484084aab95921cf522768cb0cd9d6580de3878d22dcdadfc17","first_seen":"2026-02-01T01:35:54.6385Z","last_seen":"2026-04-30T10:33:35.919114Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1993,"timings":{"blocked":1651,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/gala.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/gala.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 3540\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42E173EA3433CF3B1E\r\nAccept-Ranges: bytes\r\nETag: \"9A059FFF4E6DF226FEC5C178C7BD3C1B\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10653677546119898568\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mgWf/05t8ib+xcF4x708Gw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a059fff4e6df226fec5c178c7bd3c1b","sha1":"d19e0500e4422106e04f0180879f8eb9d813bebe","sha256":"8e2e181e61d9fd8840a89f4b27aec56cc6ed3ad711a7bd2293cb01d7b00fd8d6","sha512":"b7651073988e7ab71a4a8e8f97b94f841bd9b87e2b2f98c749a6ccd1ba7e923cd70f6987d3f1d04471731c98b1e16d8191fae05ff78ca4d18ae898aaa1ae1a3a","ssdeep":"","tlshash":"35717d793d8b01aef9285d581248d6c865336040963e0ede7d56289b3f1fe2a81b3b66","first_seen":"2026-02-01T01:35:54.637681Z","last_seen":"2026-04-30T10:33:35.964916Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2967,"timings":{"blocked":2631,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/vendor-DDN_ga_S.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:18.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/vendor-DDN_ga_S.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-e0eee\"\r\nexpires: Thu, 30 Apr 2026 22:30:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545018=lkFf+f0PFm0rL3u0K/ttIT9nP2VYtwwvjpB2hUhkKHB/wLY/5i3T/o/+m3JataDPrcHVSYhgPzfaVZE+OQvB19RAiR52qwjF1zzvFgjXEy/PhPf7GnQRKv/mrRz1kCdzpUHEHgEstRlq0+YWNItDYgy6b7OCKz5IfM8sS3AIvOo5TvwTCsF6ma8mm+MYWGMf\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 273e19dddf07e379aec\r\nx-cache-status: BYPASS\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8Nodv35tNDxHPnPHzu%2Fn7wvazunywV1ms8Zfd6iD0xL%2B0BvknKTXVBOou4%2FceU6m%2BBKXSIHwZLfUhntbHkmuThLqDbVhdvxCtO56imEy9J4Fzvpqs%2FAg84UAoFAkBotXDBS0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45decbddc8b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":921326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62f6855c578d54641e5382833b596b2c","sha1":"c4365c1b6e03e7422256a5c794d2943ef08c728e","sha256":"28147d309b30417609deb8b28f88d7b34e9ab0997b0e6d208375383858f49aa7","sha512":"3f370811ac991a207ba3dc903e47d5010866a0c1fcb39fb0a5402c41d27fee5f8445330ff6695d5c8d4e1e4370f148cb07caa0ee762719f51a7e0d54ac144fc5","ssdeep":"12288:tYpqVW37rmXYlq/D0S9QYK5lEsyDf5sKhXgdukWIlzhHyfdgJij:tY8VwaXkcAS+YK6T5s0X0ukWIlzhHTg","tlshash":"451539c97692f06147ab10e140bb0106f3396e59740e84a4f1a9d8eb7d7ad89d2b7f3c","first_seen":"2026-04-16T15:48:51.698886Z","last_seen":"2026-04-30T10:33:35.945657Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1657,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1048,"receive":609,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/currencyItem-BFDGHB65.css","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/currencyItem-BFDGHB65.css HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-6d6\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20e619dddf085aa9499\r\nx-cache-status: BYPASS\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFYRV%2FN%2FuudrB7Ub0iFmIkzbdOan2I6WTN3zAinul4K%2F%2BV37ApLVk9k6TToTlpzvu4b71vwnfEkkGRiayik1%2BWXxY5OEDs0aIqlULDVpfkbOG8Ro64LU7H1eCgJ7TeY2DHQ85g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded7bf08b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"05e28f463009a259c02db3617038ce55","sha1":"88acb28eb2a156fb24490633571d5ec07d844ffe","sha256":"d8b00ce6f68d453f27693242eac7a5a9738db4d1f28d5bf443fcc9b7494ac495","sha512":"a51c004c9232cb33d986af7f38c8436614277aaf72d40a47bb7925af83e111aec6c51bca8eea4ce67756f39d200b8d97d36cae39a70289fd10a7543767ef6fee","ssdeep":"","tlshash":"4031e05563110334f937c48b6eb8050c80643fc255975ed9e89f262bbedbad32a70e6b","first_seen":"2026-04-16T15:48:51.732903Z","last_seen":"2026-04-30T10:33:35.929196Z","times_seen":4,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/currencyItem.vue_vue_type_style_index_0_scoped_54ccabc9_lang-1sQaPn__.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:22.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/currencyItem.vue_vue_type_style_index_0_scoped_54ccabc9_lang-1sQaPn__.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 273e19dddf083419aed\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\nage: 1\r\ncf-cache-status: HIT\r\netag: W/\"69e7733c-203\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8MG5JJ9LVMESR5h40dcTTRHyboyRalP%2FznZ2qnFyQ7rCP0zF5t0mJS5KUBelZ0i0HtG7zGtmOrrlLj7fLVSJczYk%2FWlVGYDucyTdR2uV%2FPFCbEYEk%2BBYRD%2F8epE014WdFwHeQw%3D%3D\"}]}\r\ncf-ray: 9f45dee3f89fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":515,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (514)","md5":"515165bd3c0664d40fa94eb41ef632b7","sha1":"8f0e7150cf7fc9d45e4a5b0775a05fa991431ce3","sha256":"5bedbb279958f88c7fbbeaa3f1595d0efeb15f814fa572ced7eedaa16ce2c78f","sha512":"7bca74b6b1a6a335410582775305c9f609ae0e42ea647b181fb8d38bc119bfdf9e915403b9a1832d45f1e7826921b8f481b8c8863f8f62a55770b47e13df7c3e","ssdeep":"","tlshash":"3cf036465acc53bd2a72017a4f9b3e6522f704994afd52b5254e4f38476a3074e27702","first_seen":"2026-04-16T15:48:51.624277Z","last_seen":"2026-04-30T10:33:35.937402Z","times_seen":4,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo820fc332cdaa440497e6ba5a53ff42a2.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo820fc332cdaa440497e6ba5a53ff42a2.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1265\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42269DA835340D6AF6\r\nAccept-Ranges: bytes\r\nETag: \"0AF0572E3F1092CC7B9E4F463FB4EB57\"\r\nLast-Modified: Thu, 05 Mar 2026 17:26:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12868280609160072373\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CvBXLj8Qksx7nk9GP7TrVw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"0af0572e3f1092cc7b9e4f463fb4eb57","sha1":"ba540345af79b85db6e2ecbc03f72ac13dc0d91b","sha256":"3ab71237729537939ab86c2f3c38619abaa496b881c4125b78913265eb789911","sha512":"0f2fdef16c763d82ca7144a0485aaf8b71058793bc7252c57a2d9a0dc15df4d6ddf4eb09689937ddf2da5dffc4c51ee256ee324282b6b43351bd39a5918b386b","ssdeep":"","tlshash":"752198c39668bc19d119b0994559038cc0a333cb4f9a53c16f9ce9e8f63a246c991de5","first_seen":"2026-02-01T01:35:54.621178Z","last_seen":"2026-04-30T10:33:35.952908Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2736,"timings":{"blocked":2404,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/algo.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/algo.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 1644\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F4157675832359AF34A\r\nAccept-Ranges: bytes\r\nETag: \"40DD3A2B581C1B603350D30443CAC17B\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13850096993052006105\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QN06K1gcG2AzUNMEQ8rBew==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40dd3a2b581c1b603350d30443cac17b","sha1":"2089bc7c83735460b13b382075f28a2bea373ca5","sha256":"235f2db378e05a23b7a9ba18e650e920cdf05d03db4e281eb599f4a004e75ee9","sha512":"33aca5c17f91ef6d5982578197b8db8f42b5dd09c3a9e8e7f4d9b244b0f31683e13f3b96ab4cb50d5e0332752e2b52048eb0aae081338026136d4429cc26e1c1","ssdeep":"","tlshash":"c0311a132c90a175eb9f9216b1fc7f870642603e316f261a051cbaee05c55efe935c07","first_seen":"2026-02-01T01:35:54.656205Z","last_seen":"2026-04-30T10:33:35.907611Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2211,"timings":{"blocked":1888,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-DL6zLYO-.css","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-DL6zLYO-.css HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-a01\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 23ef19dddf085d09bde\r\nx-cache-status: BYPASS\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNLv4bR6FaZYJzHiOO84cf3ToiSGz%2BHldB7gsndZZrL5fhiYbsMVqCc52XVxAwWQPkKswzR3I33m3i2jtdZ8VnPT3nKjdslrhqE7plAbdhXEycIWijmT1PlutCNlPWSRo%2F4g7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded7bf06b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"9425a676d9837198e162e23b754bbe1e","sha1":"f00992dea66a776aeb59b46970b19e345a95c912","sha256":"1b6b08c98de2e984852f5127ae575902194b7debd8130e0fc72eafc80146a70a","sha512":"82de95ee255932e1eb3c60c2a3f5c8ff4f7fbcb78c590cd298ccfce67dfd5edb9fb89221fc0a347b6901fe54be9c0afd39fe4b2cfd60f7b14b19c431a4ac7b16","ssdeep":"","tlshash":"7d51558cf75d65351c3bd98bad986f4c81006e82e146ad95f097cb160acf6a3172021a","first_seen":"2026-04-16T15:48:51.643344Z","last_seen":"2026-04-30T10:33:35.909518Z","times_seen":4,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-BT8EVzwl.css","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-BT8EVzwl.css HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 24fc19dddf085e4989e\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69e7733c-3d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxgOXZ%2FxN8TY7s2GME1geGlsUK9E9aHveL12OzjLyeGDh9NCULbsda1BPnNiVV0LusAjwMw8zh3Tjqlcv%2F1P%2F5z87%2BZ1r7iARn%2FUDeD3FNtZMTObFAswduek%2FkTHnsYG3nNIBA%3D%3D\"}]}\r\ncf-ray: 9f45ded7bf0ab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-30T14:43:21.663478Z","times_seen":294,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":907,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/sand.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/sand.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 5052\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41E173EA34334D371E\r\nAccept-Ranges: bytes\r\nETag: \"B88F1E304DF1D2273BEB3AAC2F69C47A\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8191492700903623627\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uI8eME3x0ic76zqsL2nEeg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b88f1e304df1d2273beb3aac2f69c47a","sha1":"f14353649b25e363ebf121de6f6167c696116620","sha256":"c1c568606c5522b0486176bfd8eb14d6d7f250c720e108b61394a54a385a8e0b","sha512":"0a6bde04620253d821b071b1f57be6827131dcef4949d99bbdcb4303a4aa0c8860a5f8ae9788a28e2e4fe44e3458db9e9d2e58cd5b2a4145752bf136fe4232d9","ssdeep":"96:s61WZ9Cxthf3gGPbT9giJ9jBxkvfHYaeUKlUhnmo/pLuxXRxF:s6WjCPhQGP9LJZBxQvYxUhnmoARxF","tlshash":"bfa17e0d5c4b5be1775d9ac9520f5a41ad31089db7970fec8db14043331a967042ffae","first_seen":"2026-02-01T01:35:54.620147Z","last_seen":"2026-04-30T10:33:35.925591Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1657,"timings":{"blocked":1318,"dns":0,"connect":0,"send":0,"wait":338,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/enj.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/enj.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 8452\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41385D5B3535874925\r\nAccept-Ranges: bytes\r\nETag: \"7980FB75F95582BC8C3E7BEE5F38910C\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13928568063974449438\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eYD7dflVgryMPnvuXziRDA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7980fb75f95582bc8c3e7bee5f38910c","sha1":"7030251e45faf57a863b3a50d070d839ccc9644f","sha256":"a668b3f81c91f34202fea960fafa98839bf86a3c81a74a8d392b7bd30a51b0d1","sha512":"e8b001fb0ce403c77258aebe46a29b5b527910783468efab8dd18a8e9ac18597edada9e01fc24936587d671c702ae84bea387bd52ca70be1f6a488b9253d39b3","ssdeep":"192:3mY4zEhBV1BCuCXn6HAM8J1q6oFf0ijR1I:IEnV1BJC3cV8J1qOijR1I","tlshash":"c7029fbc73a1c846a95ec97ceb47443e3f18f7e46c4b248426d6b74c562c79c93794a0","first_seen":"2026-02-01T01:35:54.614537Z","last_seen":"2026-04-30T10:33:35.953954Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2329,"timings":{"blocked":1979,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-B__MzqYi.css","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-B__MzqYi.css HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-4877\"\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ea19dddf085a0927c\r\nx-cache-status: BYPASS\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Bg%2Fwqso%2BS6OMCpKYDN%2FhUatj0kR9zdMnayWVUUjSjNqokWflJZklKEN4WGKqTwYFCPj4UqKRwENZHaQKpcNf6p%2B5MvSVPq24ymQ8Kl%2Bi1aR%2FEoAst5SbumhV3N5kiOGm94Y7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded7bf09b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18551,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18550)","md5":"84d8ae7063cfa8e34f987cfeb931b6a6","sha1":"d3b81d0b9ffbb63b4aefae5ebe347d9144813a1d","sha256":"bcc20f1810cbae12c0d1400f70fb129f21a2001984576c13d61db98f99eec67c","sha512":"e2774b09654b889f45a82cf3ddd52e2441406a1dd8e362657570c4e2df0c564ff2d03ff9f344e81622a8c09a15bd33bccc0ffd96f5605b60493d4d6653ec7d39","ssdeep":"384:ezEpfJhu9cq/DUdlHSEU/dJdJ3B1OuIF4xgurpFTwm:N4s8gurpZX","tlshash":"b782b669fb282238e837d1457e84865ce015bb62f247cdd4e70b492a0edf7e7273056a","first_seen":"2026-04-16T15:48:51.751564Z","last_seen":"2026-04-30T10:33:35.950086Z","times_seen":4,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-v6uZVLrh.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-v6uZVLrh.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 234419dddf086049705\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69e7733c-304\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yivqPnH2ZzvYlfk9hb%2BTIn%2BiHSUS7DZ1mCSTf3fqtJ0i0f88UCl1EiezqiVxO1C3KMeFwt8KyVrMyz%2FMAenG60CxvCgAvkeYPAdGxyXt91lBaY1hUcVAF2MyGDf%2BAv%2BbDvfjQ%3D%3D\"}]}\r\ncf-ray: 9f45ded7bf0eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"078efc222205720077519fd8700fbcb0","sha1":"f13d3bc38252415a73cef174207e4ab271485309","sha256":"03721550765c7472c01988aad127bd53ff6821f2abf46b1889e771c324b32814","sha512":"64fe29fabc90165da4ac33130f6fce97dec0345ec316844ebd17efe42fa3cd055aff2510bffc9e3f8d9ae6e6536b8dc3d9256e4cb58ba837d3d36f0bcf483477","ssdeep":"","tlshash":"9701d0f5fd0dcfbb1fa2054051902500140a0fedfa1815e18c477e661bf0850da9f72d","first_seen":"2026-04-16T15:48:51.716914Z","last_seen":"2026-04-30T10:33:35.927568Z","times_seen":4,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/en-DitKjTsT.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:21.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/en-DitKjTsT.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-a3da\"\r\nexpires: Thu, 30 Apr 2026 22:30:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545021=LfMmW4v9iFU6w3mpC/JFUKFs+SRqQqEf+zpIiqXS7Xw47YWISTevkQHia2H7fGW2bB4e6HMadDl+gU+xlcTjXXvpkCAqjEVvUnf0dWCWic+8QtNeEhjKGK+DbX8cbw5Y5CAPPAMiHhmo1QCZ3ZrRQkEbVeUGA/yHSaqpnPg6jCbLiGAutqIsoWnz1EHlbSDw\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 27c519dddf08a0e99df\r\nx-cache-status: BYPASS\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEhgKdnTU7UDyHE4b%2B5Gr4YejPhrgaHp2Bm%2FI2Y34UA8%2FxfdRu%2FmG7HpLnmPgcmkT7SoI6SlqM0MEZlo5yFPhFX2LI7euxhyYbMLFW7KxqZqwjHTz3PFT6VOYX0HmOkEJM8kUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dedecfe9b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41946,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41923)","md5":"9a65bd591512af559ac5a20257fe8917","sha1":"5e0ac46d7b6b20c32bcfc207337e42dad11355e8","sha256":"7b41fab8948e97b032c8dbf54bd2f28e87abe9451f50ed227c0e17ff8616eced","sha512":"482114f7edcbb58551620f3a6c494cfca9f66df93a6a084aaa1edb2709d9947b48adb0c216de414830c8fb116093eec22bb29e2aa85e3f8a04ba440a849da2b0","ssdeep":"768:+GtZcEw/o7r4hKxsiynAMcIrAaAMFVoP6+gsPG9M8mwO6fpk7aOjxfQnW:ipon4hg2+IrdFVFsPWM9jxonW","tlshash":"4713d7897d1a989a04f3537674ce6e1120f609c18256881f4fedc9fd53d2b67a363b38","first_seen":"2026-04-30T10:30:46.064672Z","last_seen":"2026-04-30T10:33:35.916861Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-DDAjVMGg.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:17.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-DDAjVMGg.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-1c628\"\r\nexpires: Thu, 30 Apr 2026 22:30:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545017=OnC7qSkMoZ7zHIlEfP0e23jddhzK5Sy3OKM/S4WaD9BcOdBDLj4GUe10Ny2OeCElxN3gQrIa5AtdyWC4I4MF15cM/tL55KKbqKzhKN4lPNogVl5jgNGksx87vTcZ9OsHbmPzbMAcmgHoHk0Kg9rKwiWHmmX+i3kG3HgqggohyAOc30fBJNbAEazWbxLxucsF\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 286619dddf07a0196f7\r\nx-cache-status: BYPASS\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GenTUJJJggGPA%2BCe6JOm5fxGfP6tlfziaxctsJxfe6Wabvz%2BuKho8okx4ItvLvzOvHgBZ8TSHOOtw1P5ygENI3gX5m0cyT0nVYI3Tst6%2F2m0Q8ObYi5G1zdpvCpkUeQktNlelg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dec50c66b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59744)","md5":"70d22687cca848b9d7e7ceeff5f7593f","sha1":"f9bb0554cf6c72cc2a0f42fac2158a3a4ac95c47","sha256":"939eb059dac3e2dc040ae2720236d392447ca6d8106bc805a21ad11cc4521625","sha512":"9581f61216267cb75bb28b3c9dc2c627e940f88d50eadf5e756b854d706ce0acbd1252eedffb99be725eeb055d4814726cd6f9468261d7b8db54ead59d777d9d","ssdeep":"1536:8JZw1tnrD/D7tdF8YaZo/fitR1dqevQjGk0pRyn2xI:Hx6YukitpkYRynMI","tlshash":"cbb38f49990b0ffe66fb04542547141030b40f9b9988c8bbb77ddd1a3bfac99a397728","first_seen":"2026-04-30T10:30:46.066727Z","last_seen":"2026-04-30T10:33:35.936593Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1068,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echoe5b0143592cb49879ba2011f350ec9df.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echoe5b0143592cb49879ba2011f350ec9df.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1254\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F425767583235D9F64A\r\nAccept-Ranges: bytes\r\nETag: \"3A42067F66BA7BD262D958CE59F07F8D\"\r\nLast-Modified: Thu, 05 Mar 2026 17:26:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13552081824020238910\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OkIGf2a6e9Ji2VjOWfB/jQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"3a42067f66ba7bd262d958ce59f07f8d","sha1":"cb50c2126167e3576edc789bb8f81f4c5de23eab","sha256":"abe2bbb373474bd7239f51a8f9201353324a1760216d092a84330c47e30a5921","sha512":"77e15cbb228a2fe26a20925663c91bf5162836db7cfc3b4acc81b4a68a3aee85a9971eb9182b346339d8c4b5f902c4283acb602c9fed7634e34fc27bb6179280","ssdeep":"","tlshash":"23211ab76213c9308f844d9f5932d8b00ec13c18f54210b0b89ac1a0499849d7b8a59b","first_seen":"2026-02-01T01:35:54.646024Z","last_seen":"2026-04-30T10:33:35.956566Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3272,"timings":{"blocked":2952,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/xrp-line.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/xrp-line.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 2513\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F40269DA835346265F6\r\nAccept-Ranges: bytes\r\nETag: \"73E315646D4AB703122B2E68E52FF59C\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15333866585310308494\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: c+MVZG1KtwMSKy5o5S/1nA==\r\nx-oss-server-time: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"73e315646d4ab703122b2e68e52ff59c","sha1":"7b36b167ee502f0ccb4906ceaa324a68bd8bfc13","sha256":"f72ad94aa2e4336075b42fe6c9624ded12e82287d7c9f74115bce9b69775b027","sha512":"51f438181896851b3f42f89abce08da5fa1d381970f0aae7f420f97ffdf9a9dda3b47af1f6137c59c40a7bc593c727f446fafe969ee8d73253707a7dd2866398","ssdeep":"","tlshash":"5e51a6cc72e88e80cbe050571b30830066e2b46733e35bae11548274782aaedbb55ef3","first_seen":"2025-08-17T16:32:32.411883Z","last_seen":"2026-04-30T10:33:35.962741Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1983,"timings":{"blocked":973,"dns":0,"connect":0,"send":0,"wait":344,"receive":9,"ssl":657},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/egld.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/egld.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 4996\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41D72D2036357AEDF8\r\nAccept-Ranges: bytes\r\nETag: \"0EDECF37424206864C98DAF6BCEB0DDE\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7717942084918367618\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Dt7PN0JCBoZMmNr2vOsN3g==\r\nx-oss-server-time: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0edecf37424206864c98daf6bceb0dde","sha1":"1f5ab70822107753b99d1f778ba3fa5258bba057","sha256":"eb6c97d11afb67156286ef351ff091606e5cdfbe0a63ac18ab23389f2266ad7f","sha512":"d1f8b61e975772d38475d65803a5c05bde01d696e6f004b1974772c948e30caae792de1f267e851dcb5ebcc6c3b3fd7fbb185eb69c72799a61bc1259448ab8b1","ssdeep":"96:aMz4zKG06hqYm0Jl8uqdikF1BcxD1LzPkDVRVkaYnUiNn1pUyruM:a82b0Um0aF1B0D1fcDVR5iDNr1","tlshash":"baa18e26a035d9ba1df4811c44225913cb8ed20818fe38b55c68dc1ba1a27f57375dc6","first_seen":"2026-02-01T01:35:54.654452Z","last_seen":"2026-04-30T10:33:35.911488Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1656,"timings":{"blocked":1316,"dns":0,"connect":0,"send":0,"wait":334,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/XLM.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/XLM.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 5352\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F416B4B133239403226\r\nAccept-Ranges: bytes\r\nETag: \"D2291BAC1DEED602897FD013F82DA9ED\"\r\nLast-Modified: Tue, 10 Jun 2025 18:56:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14151168015788193189\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0ikbrB3u1gKJf9AT+C2p7Q==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5352,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d2291bac1deed602897fd013f82da9ed","sha1":"7af5cdeb1b8944dd0ad49085517a24753a965c0c","sha256":"27bb5aa443ddcca50ad9fc97c7ca0f685bc1b1ced5b219143f7ae4332208a764","sha512":"eed5db22e770b58940c47e4470152d3556e02052fbfe5a39dc364e331c7529c5df3407149b0e7eb3654f36d78c53aef2bfc80c1fb261c4f4dc1b5092c32cfcd1","ssdeep":"96:93wB+HmTuN8LyfBDcjnCU8+VrQ3zOrfTgXy8UPF8mDzONpJsk4z8mzLfct8GrMU:RwymTuN8efBDcj3VRfMXEF8mPI0pzLWF","tlshash":"f8b18e4b157676365adea063023e8492357d730a06be0b7f7d7225301ee6588f7861d4","first_seen":"2026-02-01T01:35:54.629784Z","last_seen":"2026-04-30T10:33:35.948112Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2260,"timings":{"blocked":1921,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/xtz.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/xtz.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 3482\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41269DA83534F768F6\r\nAccept-Ranges: bytes\r\nETag: \"1A8CC81550D4595F7875E166CA29A246\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3338269171739833704\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: GozIFVDUWV94deFmyimiRg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a8cc81550d4595f7875e166ca29a246","sha1":"9a59e63fa937fb240ddf2174336c5f7d8890c7be","sha256":"aebfb1e65c36eadccb03d3d23a6948eda4c25a56c0d4abac0d823eb3e5979f13","sha512":"3d85a20188617298ec8a3da7872ba804c5391e27bb80e68b96324c2ce5b8c58e6c1413661f845a6b7f59e4dbc53ec2a5e669b8a5bfa3808e2c3c158ad3995022","ssdeep":"","tlshash":"65716d2fe5c87b88fc320601d6b632bc46d832451477ed85b6a038261dfa2a8535cfec","first_seen":"2026-02-01T01:35:54.602089Z","last_seen":"2026-04-30T10:33:35.926903Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2300,"timings":{"blocked":1967,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/fil.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/fil.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 5938\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F41E173EA3433A4391E\r\nAccept-Ranges: bytes\r\nETag: \"7DCAE46EBE7ACC589D83A5DE378452E0\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7330344943385741845\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: fcrkbr56zFidg6XeN4RS4A==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7dcae46ebe7acc589d83a5de378452e0","sha1":"8366b070818f0ba27acafcf0f8f79d1eca1b8836","sha256":"4c01722e9a0c31f7a6133294530eb87e5b2bf48c968f59c15a4d0063999317c1","sha512":"a0ba92aff1266eabab1a4012e8ee79b83cf2d7131fe8a2fc7909035b1f66bf57b6b232af48633cc2d0ad5fb5bc6dc7176feb928e7a6169a2fe2ce4ba4aceafbe","ssdeep":"96:fUeGlsJ1l63TunQmVUbe+m9kLGwyxQR/ReEGYcYFk1p4A4VQFESmnHUsKh0E0iwI:fUeG0Eju9YmxQ/RemcYC1etVQFPckhND","tlshash":"7cc18dbc5bf37071125e92954731f3e96c2f0a3991820bacb94d1840f2a8d1ab5ee8d9","first_seen":"2026-02-01T01:35:54.629012Z","last_seen":"2026-04-30T10:33:35.963892Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2306,"timings":{"blocked":1966,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/dot.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/dot.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 6476\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42D72D20363557F1F8\r\nAccept-Ranges: bytes\r\nETag: \"7D89B07D94BF693C54714EDE1AB940B5\"\r\nLast-Modified: Tue, 10 Jun 2025 20:23:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13380480310606961986\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: fYmwfZS/aTxUcU7eGrlAtQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6476,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d89b07d94bf693c54714ede1ab940b5","sha1":"2b205279a967f6b9dc501b2224b3976b70ce96d2","sha256":"c60d1c61328cbe268a8a6d7ad18d713f22c91d4450ca93729542253456e719d9","sha512":"1b2db69e64a43193c01b5cf7a4e157f54f7e676683da6c7eade46be72a6ab345e5418577c04f1b049c2d6507ebc31d83e59169ac81b13c58fb84ebab636f85f7","ssdeep":"192:JLTaLJPY3SY/Xs+Rs8WZ5i5UOFLbhGCZwO:9TVCYIdubECh","tlshash":"afd1af7f814dd4c8cc538395e271ea8f20a44908b292d365186bf39ac89bed134a95f6","first_seen":"2026-02-01T01:35:54.612076Z","last_seen":"2026-04-30T10:33:35.944049Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2962,"timings":{"blocked":2623,"dns":0,"connect":0,"send":0,"wait":338,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/vendor-CLlvuayw.css","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:17.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/vendor-CLlvuayw.css HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-16c41\"\r\nexpires: Thu, 30 Apr 2026 22:30:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545018=lkFf+f0PFm0rL3u0K/ttIT9nP2VYtwwvjpB2hUhkKHB/wLY/5i3T/o/+m3JataDPrcHVSYhgPzfaVZE+OQvB19RAiR52qwjF1zzvFgjXEy/PhPf7GnQRKv/mrRz1kCdzpUHEHgEstRlq0+YWNItDYgy6b7OCKz5IfM8sS3AIvOo5TvwTCsF6ma8mm+MYWGMf\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 274a19dddf07b789d70\r\nx-cache-status: BYPASS\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApQmMTMX99zbc%2FhQfpCJosoLOusQNrunlXQLbCyP6kzQkAhJPjFOaGlGAjpy4HUNWw1TIfDSAoLi4Bf2HpLv%2BOcCoDMFTiHNMfeKfweEQ81cWIHnw5L%2Bmv4wqEq8H5oaLm3HsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dec50c67b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93249,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"25965c0f43036a523fa258c51edc3464","sha1":"a48436b5ef29ba599338b1e32e4c66c5ceb8a38e","sha256":"f0604fe838a3e682ecb31983851f50b912c24d10dbc2f4a2f136e3458b1cd5ac","sha512":"13fde97b090536832b771bdbbe2bde1dae384e23277126d6da8f381265d836ff7b0dbbd2fdaafead512e8d9fbaaec51e2af37b2a54dee4a2cbbdf2ce9d80a7e0","ssdeep":"1536:BbIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BFNIClDsIxuVS8tb","tlshash":"8793d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2026-04-02T05:35:13.128823Z","last_seen":"2026-04-30T10:33:35.961675Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1461,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"h5.gtcfxtrade.top/ws/0f55b065-854b-415c-b4a8-5b2036f4834f","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /ws/0f55b065-854b-415c-b4a8-5b2036f4834f HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.gtcfxtrade.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: fD43UHqQFRo2mKQkgJ/R1w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Thu, 30 Apr 2026 10:30:20 GMT\r\nConnection: upgrade\r\nAccess-Control-Allow-Origin: https://h5.gtcfxtrade.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: misK27mZLSyp1q8qSzy5eK2nNgQ=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nL-Safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nL-VIA: l1=P3OZ0mtEcme3AyWm\r\nL-VERSION: 1773931329\r\nL-Request-Id: 229c19dddf085ae9484\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ToKNZlr%2BSFrXHftj280GfwDSvNrLhBECpXn93tQ2YlmKJJRJoRSwaZK4qUG1cIKMFnFnJMbE2tgLc53UZbSncHSqDqmjbByMgWqkJUNM4c5id8fARg3X5NeGWioZMovZ%2FU0KYA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9f45ded79f89c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=499\u0026min_rtt=455\u0026rtt_var=206\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2346\u0026recv_bytes=1201\u0026delivery_rate=4394537\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=38d12db2ce89d831\u0026ts=887\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:35:17.446879Z","times_seen":14427018,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":0,"dns":20,"connect":20,"send":0,"wait":873,"receive":16,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/index-BkGh6s6X.css","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/index-BkGh6s6X.css HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 22:30:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nl-safe: 1777545020=XLlzlV3LH2FJpv1Lwhl+6YMearuVOV2ubDABlaCAPe1ylmhFIevnhInO5lkOtzV81qa4D/733Oo0Y5pkr43C+TWlHgNfzyKZTTGmV/Gm2ROd5OECrhFrvZIPdBzufUSrkuv6DQwufHGf6L0RXPg+t8mAufErZwkAJtAmymzDpzMr/oeuVExqPqVtPzM3UKJu\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 231019dddf085a79c26\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69e7733c-18d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9b6rAxtMNxnPg4TBvVOC%2FzUqCrdqbglmxHrtvlG1i9iqGPIYEV%2FtRk3%2Fl7CbIak7gORH9JYDYpquA9TRjTIxF43JlPFkwrtB2M8229hftm2sTBr0wkJh3C3mW3lkvqYWWswMQ%3D%3D\"}]}\r\ncf-ray: 9f45ded7bf05b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-30T14:42:23.630284Z","times_seen":648,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/api/common/getMt5Amount?coin=xag","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:21.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.gtcfxtrade.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:21 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://h5.gtcfxtrade.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545021=LfMmW4v9iFU6w3mpC/JFUKFs+SRqQqEf+zpIiqXS7Xw47YWISTevkQHia2H7fGW2bB4e6HMadDl+gU+xlcTjXXvpkCAqjEVvUnf0dWCWic+8QtNeEhjKGK+DbX8cbw5Y5CAPPAMiHhmo1QCZ3ZrRQkEbVeUGA/yHSaqpnPg6jCbLiGAutqIsoWnz1EHlbSDw\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ee19dddf087a7a2ed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLRO687rHJevJ1knQ6%2B0ChmA01gVT%2Fy07kr46RAnvbZV2n6CfxlIRs4RFA9jwn6bhIf1Gx8msnStR05d2nVlVTAB7t3S2YfU3IfZ%2BgAj8eqbjvCInp3BN%2BMn0KGo71RaZ9da%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45dedecfe7b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f47d58655f58adda4313a33b415909b4","sha1":"54827929c063fd9e63043eeaa2b281b1cc35022e","sha256":"e422450e886834534a85bc3d088e0a0f8ee0e105fec5dfa18f3accbf8fe548b8","sha512":"b863b2cb98d09f66f2b4196eea588a1af4e64da0c100d6bfb1d8d48b0c9c2ff55887713536eceec52f0287bfc495d2f5c75ed01e1d05f469cecf6ecc71b10dec","ssdeep":"","tlshash":"0a9002551c188247a88300a5951a1204182531a0762493484c59912581881a66090858","first_seen":"2026-04-30T10:30:46.082783Z","last_seen":"2026-04-30T10:30:46.082783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo45b878de7da749a3b3b6a66ad5a8e7a6.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo45b878de7da749a3b3b6a66ad5a8e7a6.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2523\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F42E173EA3433BC3A1E\r\nAccept-Ranges: bytes\r\nETag: \"28597515F2E1DE9FF0AA28E125A75CD0\"\r\nLast-Modified: Thu, 05 Mar 2026 17:26:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13951145874519314879\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KFl1FfLh3p/wqijhJadc0A==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"28597515f2e1de9ff0aa28e125a75cd0","sha1":"dfd2ac81b16ebb3baeb5e34634db8081f00a280e","sha256":"dfe845f0b302565703e51657db9ed211c697060821f1fe80f4eaaa01acecffbe","sha512":"5fffc03b9b1f567663abf75c103634dfd11c073d2f67c3f8c77bc5bf63b82b9f2818ebd655815825a08647f9b0bc63158479c5d60a1f95a5797b3b30c5c6a9bd","ssdeep":"","tlshash":"96511a67dde09038dd92f93f11595acfe90e2c89240e99ac08c9e6006663d6f5c587e5","first_seen":"2026-02-01T01:35:54.607188Z","last_seen":"2026-04-30T10:33:35.941843Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2741,"timings":{"blocked":2404,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo22.oss-ap-southeast-1.aliyuncs.com/echo/rune.png?2.0.1776775995977","fqdn":"echo22.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.222","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo/rune.png?2.0.1776775995977 HTTP/1.1\r\nHost: echo22.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 30 Apr 2026 10:30:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 3194\r\nConnection: keep-alive\r\nx-oss-request-id: 69F32F425767583235B3F44A\r\nAccept-Ranges: bytes\r\nETag: \"2E6E30B8103C3553C0E755251A4C9003\"\r\nLast-Modified: Tue, 10 Jun 2025 20:03:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13923692208060719901\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lm4wuBA8NVPA51UlGkyQAw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e6e30b8103c3553c0e755251a4c9003","sha1":"380c088c264cf3754b22aff9cebcb28405ec2dad","sha256":"0a0935855d0c06e5c79c53ed8128128171197706082ae74db70673c8c3b48e2a","sha512":"a2b2f8c6ac0bfe790955c76ed921c1cc03f9cb71d70627ff8dc5cd89f2c9109005b6e4d1a21f80df7a9715e3928ce06068f70807fb8331b5e4a2f0f48adb4dc8","ssdeep":"","tlshash":"aa615d4d6056e3e1b8cb45ae2458943d4af822ee7e7357d2180f459383f4f533656e0c","first_seen":"2026-02-01T01:35:54.64527Z","last_seen":"2026-04-30T10:33:35.9348Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2519,"timings":{"blocked":2197,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/api/common/getAllSetting","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:23.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.gtcfxtrade.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:23 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://h5.gtcfxtrade.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545023=rA/WIZm3GoHTw1u2CwwDKLiso8KKf5IlU2Fwwl4e1jbiB750BX+n3iXXnYfSQUEXLCwUqMizUnB8kYIoF1tHN7+54BOpglDcQFdPypdpEIlJJWHQj+Td8+p27rUuenX0e02iAaRZ/7bSnwBtruKUSc/B04g0RUi6D5D4JfGWf22GF0PAgKUiowatc0W5kzj2\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 20ee19dddf0913da2ef\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dx5Xj3V9ocb5S20Uu1Twus18zu1OmD9SJw3xRZ6FEleoncYWiGqXxBz%2BxvtZjYV1327dU%2FsjQs36KPgPyA9dGeFBDezy34YGFq41bOpsdryYTJFEOENv9RBKVoOBDmUUqXOv%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45deee1a2db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16657,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (16214), with no line terminators","md5":"a0fa38146e84cf998435a1013a31fedc","sha1":"37839cf061e8131a5f6813c7f74dd4e0d7cd45a5","sha256":"5bddc4b6e1f527541bf70a043fe629fbf27cc25063ae63c9d2a010b54a318653","sha512":"91943c826fe91648ad0961b0d9ca5e3b5b5ab5e330eaddd11977cf587dc0451bbdb19e5940fdd7b81716e15fa22b1d4cdc3b5fa83db282c2bbdc9ff9ca2597dd","ssdeep":"192:O1bkbOMm9yNnvyj9f6+Rb3uc2msHZPK1Z+iZNOx6WqtMJ0ZzHZgzOu2scQ59QYsC:CYS3EYudngiN2Jg/8109nJlUOn","tlshash":"cf72850d3a98cc7953c617d2d49bba98fbcc3867d8d4ec89e5a7ef1c88856b5040e41a","first_seen":"2026-04-30T10:30:45.994407Z","last_seen":"2026-04-30T10:33:35.928366Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtcfxtrade.top/assets/vendor-DDN_ga_S.js","fqdn":"h5.gtcfxtrade.top","domain":"gtcfxtrade.top","tld":"top"},"ip":{"addr":"172.67.217.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.gtcfxtrade.top/","date":"2026-04-30T10:30:20.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtcfxtrade.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 12:46:38 GMT","end":"Wed, 03 Jun 2026 12:46:37 GMT"},"fingerprint":{"sha1":"45:DA:BC:F3:6E:4C:87:00:2F:B0:7A:1C:43:0A:9F:0D:A4:CF:88:96","sha256":"94:B4:36:48:44:80:7F:5F:3D:4B:9F:F6:C9:62:48:A1:57:BD:85:DC:42:41:AA:4B:11:8E:56:A1:DC:45:10:2F"}}},"request":{"raw":"GET /assets/vendor-DDN_ga_S.js HTTP/1.1\r\nHost: h5.gtcfxtrade.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:30:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 12:53:16 GMT\r\netag: W/\"69e7733c-e0eee\"\r\nexpires: Thu, 30 Apr 2026 22:30:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nl-safe: 1777545018=lkFf+f0PFm0rL3u0K/ttIT9nP2VYtwwvjpB2hUhkKHB/wLY/5i3T/o/+m3JataDPrcHVSYhgPzfaVZE+OQvB19RAiR52qwjF1zzvFgjXEy/PhPf7GnQRKv/mrRz1kCdzpUHEHgEstRlq0+YWNItDYgy6b7OCKz5IfM8sS3AIvOo5TvwTCsF6ma8mm+MYWGMf\r\nl-via: l1=P3OZ0mtEcme3AyWm\r\nl-version: 1773931329\r\nl-request-id: 273e19dddf07e379aec\r\nx-cache-status: BYPASS\r\nage: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCun2plwzyR610iS3KHSRP15o1icxZhR4EHfGgbBYg3%2BFtp8VwIqTRecYvTKub3GqaIKbnHOXAwL0eDOj7ZuV9uQOQztjkFQxBbGrqUOlEj8r0MkVGq%2FbKFtBWkejNhSL4hnFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f45ded72ef7b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":921326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62f6855c578d54641e5382833b596b2c","sha1":"c4365c1b6e03e7422256a5c794d2943ef08c728e","sha256":"28147d309b30417609deb8b28f88d7b34e9ab0997b0e6d208375383858f49aa7","sha512":"3f370811ac991a207ba3dc903e47d5010866a0c1fcb39fb0a5402c41d27fee5f8445330ff6695d5c8d4e1e4370f148cb07caa0ee762719f51a7e0d54ac144fc5","ssdeep":"12288:tYpqVW37rmXYlq/D0S9QYK5lEsyDf5sKhXgdukWIlzhHyfdgJij:tY8VwaXkcAS+YK6T5s0X0ukWIlzhHTg","tlshash":"451539c97692f06147ab10e140bb0106f3396e59740e84a4f1a9d8eb7d7ad89d2b7f3c","first_seen":"2026-04-16T15:48:51.698886Z","last_seen":"2026-04-30T10:33:35.945657Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"h5.gtcfxtrade.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}