{"report_id":"f5112777-1688-4549-8b29-b43743329c07","version":0,"status":"done","tags":[],"date":"2026-09-22T21:18:27Z","url":{"schema":"http","addr":"gewk.top/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":0,"asn":4907,"as":"BGPNET PTE. LTD.","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"title":"undefined","dom":{"size":22367,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15921)","md5":"c717e3fa028aafe26b38aa1e2e553cec","sha1":"7925c29fef85ca44c0f33fd7b4d68bf9a4fd1bd7","sha256":"25cf7d537d9f964627883f78aefc01844e9d92a453567131def5938240981d0d","sha512":"3fb08a85ca550a54dca9a4a409940708284971ee46deaf95df9291a559916adf94bbe20907230b2b8035d923179131947699c194e0602950e61bc64a7115d728","ssdeep":"384:QWxZCxn2c7EjHcFSF2FaFWF2FOoFnFvnAYaTI:QMQxn2cP2iOCiOYFvAYaTI","tlshash":"48a2cb226555c0a312b386c4d962bf69b3f2f30fc40b9818baec81964fc3db4ba55971","dom_hash":"domhash4420259592d2647f4a09588241a409a9","first_seen":"2026-09-22T21:18:49.749423Z","last_seen":"2026-09-22T21:18:49.749423Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gewk.top/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":0,"asn":4907,"as":"BGPNET PTE. LTD.","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T21:18:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gewk.top","ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":2659346,"sent_data":12514,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.gewk.top","ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2026-09-18","domain_rank":0,"first_seen":"2026-09-22T21:18:45.444985Z","last_seen":"2026-09-22T21:18:48.039772Z","alert_count":6,"request_count":7,"received_data":3142,"sent_data":3751,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-09-22T21:15:37.022332Z","last_seen":"2026-09-22T21:15:37.022332Z","alert_count":0,"request_count":21,"received_data":144828,"sent_data":12141,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gewk.top/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1d36adf7bef2e2d37d8118aea9efdae","sha1":"be42072a5fcf2d1f43fcd5a23e105cdc389a076a","sha256":"04ad516aa6307ffeced80d556c3f9f7afddf19ff50fe93496a6fd073f030a6ff","sha512":"f5d8c8cd3e0264e827bc2f081dec0c662fbb3924ea1fe0426dd23aa9460254da2861b36973bff74185fa9cd41dab54827ddfd701b00e98f089402393e5d7d630","ssdeep":"","tlshash":"8111abfe191a60296303404e976b7811653250e9000a184273cc9b9dbb9ab6dd0cbb8c","size":1034,"data":"","first_seen":"2026-09-22T21:15:44.370772Z","last_seen":"2026-09-22T21:18:49.821484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-22T21:57:49.790757Z","times_seen":48897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-22T21:57:49.791407Z","times_seen":50196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-22T21:24:20.899988Z","times_seen":7535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"f049705ded586ec888809453ddb97eed","sha1":"c04197dd58fab49f9d3974f390695d56e388a792","sha256":"3b2046fc0d9b54e8f978fcbe69edf1eb43f35320283ed2e39b12c20deafe4f45","sha512":"9f33bd944891eeddb142780f0236713298022b151db1db846f52e53f4399bfdf96834a0a86908aa80ba71c1a60b8e717df28c7c85ab59dc7b3734f4757e02849","ssdeep":"","tlshash":"f4c08cd4b0ca6d00a603691011af35e49024806770482b029ca4dc882f234b09237e98","size":147,"data":"","first_seen":"2024-12-02T08:41:53.640766Z","last_seen":"2026-09-22T21:18:49.830548Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-d5b593db.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a4dfd0871a9969b3866c41b526b9857","sha1":"f78f98c8498a290c85dd62be7d164d100a7cd89f","sha256":"74c1d0a0e70b90dde5507e46d95afc797349612847f01d62eae614fb6c9c8687","sha512":"c08e5094eb11d4d8b588aeb8741eb792364150d3f8715449600f62460e71d3c7cef16564cbe5a5b0480dfd42a70e7119cceef3f5e38abb7b6760973db8b09f1b","ssdeep":"96:qAq+CY/9Y6qD+wSXNrFqPyAtb6airIP+jn3hv+e3XfWarejt:M+CYFY6qiwS9YqAtb3qZ3hv1Xu/t","tlshash":"a9a1c999f80286beb9671440489c0010319cbbffb10948f1fbfead0977b4979d364766","size":4663,"data":"","first_seen":"2026-09-22T21:15:44.350818Z","last_seen":"2026-09-22T21:18:49.820699Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"1797b90369a99ff22f1c40b0d94ec9a1","sha1":"aec8ba7bbf7bb80c7a4669d074c61aefb319ecfc","sha256":"e7129c3c36ef7b4a55f09622f14d1a60dd64551f16fd0f7a070edf2c75a13680","sha512":"a578a2dae3c0843433b3aca46d828da3db506e6c048302d6e857b77767968b4cac8e71e6d56dbd81aca28909b96a5f23447544a7a24ac9e3486478aa64b977bd","ssdeep":"","tlshash":"70c08cc4a0c72e001646641018af26e49034402ab0482f568df4d8492e620b08233ed8","size":146,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-22T21:18:49.831236Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-22T21:18:49.832215Z","times_seen":1119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-09-22T21:18:49.832985Z","times_seen":6940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-22T21:18:49.83378Z","times_seen":1117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-09-22T21:18:49.834549Z","times_seen":894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"21738b5e0f5c65b6c7c7629b894fda1a","sha1":"953e5f38a32d3dfba6889cf2628473f02ee2a133","sha256":"8444b60d4c9ba298b0d231ac5f88fb4b6ddf792dffec974e73ffab3cf4e891ca","sha512":"badcd90261fac837fc4e50079498d9cba45edc18a29c34a221174a835faa92fa3ea76dd0080f7071974f2d8850c29eb8984b40c4b6f5ae0521b034b449d8ba59","ssdeep":"","tlshash":"88e0abb63279c030548586291dfc1827f2a7a6724d9c0e2eb0c0ea095e4dd2820b8092","size":408,"data":"","first_seen":"2026-03-23T14:50:53.629157Z","last_seen":"2026-09-22T21:18:49.835393Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-22T21:18:49.836057Z","times_seen":1106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-09-22T21:18:49.836686Z","times_seen":7231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-09-22T21:18:49.838013Z","times_seen":6456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/charting_library/charting_library.min.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-22T21:32:31.319196Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-96378681.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"15de10a3728f3f2352399834cb115f83","sha1":"dc636b272552efbb6e5ccf3ea2d56ecd876db905","sha256":"f06fb2f5faeea24b7bf1d59d64f0a5337bbae10ea33ae91453814f1768f659e9","sha512":"3d2b7e658fc80fda00c2575a56831189abdde62b1a39b433527cb56ed3c00771f5b38d592bc01f045ca07a4b5a5aadca3241f754a588febe21d3b3f283804105","ssdeep":"384:u2NzqBT7hRf0xuF0FtAfU2w6KImMuEFuZ36kXMMzprhQhdCUSD:bNCsUKtAfUnwbAprhQhdCUA","tlshash":"6c52e865f902993ef6ffa05140980050766a7ffb411a89e1b9bc6d4b7343eb8f389708","size":14022,"data":"","first_seen":"2026-09-22T21:15:44.346292Z","last_seen":"2026-09-22T21:18:49.819562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/filters-ebea64bf.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6a819db58d4de92f2191cfaf3c1723d","sha1":"1259386049aca863bc8846254046cb001aaf8637","sha256":"1c96ffa3ff45f4e4dc0d721092c40760999991a150d4694eac41e18b7b01c65f","sha512":"2a2d440a41d7249830d71e9c0f4ffa4d8a1dc024c8dace9f49f072a9d967ceff72e059c5d8c348869d9aa33bc7517cadf461796555b3730a155b6ffa9fc8be56","ssdeep":"","tlshash":"095124edfdd7613356ea6ef940288414728ebe20686e0a4df54bd0455933888e0bf778","size":3102,"data":"","first_seen":"2026-09-22T21:15:44.32434Z","last_seen":"2026-09-22T21:18:49.763078Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-22T21:24:20.901573Z","times_seen":7242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-22T21:18:49.839211Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/vendor-eb205ae6.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"02759b80e530bee3460c1747943c3e95","sha1":"d3151627784736dd9999a98f06bfcb2ab9f9561e","sha256":"70803b0026cbaee22493f49c638d3b795bfdedd46a91eb6a618bbd3f63c51298","sha512":"c46767425509f567a6548f782c6c09772b7ec20692d5c997eed0c7a834174d98dfaae0d0d9f3ced483c640869f2a9948edfb1d333feb91ef29d59752ca727b74","ssdeep":"12288:MWVxNiVrzNfnGMEAaFujpEgjWR8tSkHpcE13WYdWzoE0KEXYcba2VW:MWVHiVRntEbFsEetSkHOzYdWzoEYa2I","tlshash":"291529c97292f06147ab24e240bb0006f3396e59744e8494f1add8db7d6ad89e277f3c","size":879097,"data":"","first_seen":"2026-09-22T21:15:44.325781Z","last_seen":"2026-09-22T21:18:49.768567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-6fd70a6c.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"237a03c82818b645baac8606f711d060","sha1":"96ab01e376219130f524b96ca57c88a8c9028d8a","sha256":"874f89299953cf9ad8c21cbdfc3dcfd1d335ac17554a65a1fb25a0575465a68e","sha512":"2818cb5d71d71d3dd80cf73575fd2bf2298c9b7d9c23ab3d2cbc4c520ca74870a37d046ef5672848aba71a2693f7696d53c3dd56af55d8312dc802a840a713db","ssdeep":"","tlshash":"80e0f10f195ac2f227a38cfce1330811610426441300e180e1031608a2780d3a05f378","size":388,"data":"","first_seen":"2026-09-22T21:15:44.318777Z","last_seen":"2026-09-22T21:18:49.800006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"df55055f75e2187c0c3ffd3298e162c2","sha1":"dc0db5a52df96c5c7636f6c0aef602a6ff8d0042","sha256":"34d238e0facf0645b79ceb771e2969c69c252c99e63f22e7fcd3dcfc6d7ba0ff","sha512":"e903ff7edc9a3fe9051dacfd58d309f38e5f7689fa9749821e071171fee8dded977be371a8cfafd49c12a8e2501483f77fa64b0e732c827d0b5c0cca892cd137","ssdeep":"","tlshash":"4fc08cc4a0c33e102656641054bf25e490244027b0481b468cf4d8493e630b08233e98","size":144,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-22T21:18:49.840435Z","times_seen":6031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-22T21:18:49.841383Z","times_seen":3814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-22T21:18:49.84217Z","times_seen":7000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-22T23:23:52.19485Z","times_seen":15355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-22T21:18:49.844078Z","times_seen":8024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-22T21:24:20.902135Z","times_seen":10387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-09-22T21:18:49.845453Z","times_seen":7643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-22T21:18:49.846299Z","times_seen":6461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-22T21:18:49.847054Z","times_seen":6256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-22T21:18:49.847695Z","times_seen":7568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-09-22T21:18:49.848299Z","times_seen":1949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/#/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-09-22T21:18:49.851585Z","times_seen":6388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-3c891471.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"3703e035e31e0726211e9c9f2b9d2ac9","sha1":"0736156424a1d68b91803c6d6922e130392f37a9","sha256":"7c39f49e9ec431b4be69af33907fe8bc1a60fca4ff0698af982ef55e0b3fce82","sha512":"735cfb2ca23e94777038cf97123abc055d1a4ebbe0574cb3e75f4d8aaed8ebce7eef7204962c95aef97e4ae0e7b3eed9babc5de1a02b7f6e87c72ee362b4c9dd","ssdeep":"768:YD6tmDghNrTXpdRn2Ht14FGmYzLb5DuIXX9IiMJV32/q2HtUuiConYxoU/KBIQff:CWtldYrvJZBvtUxCSMCgpBlgAl5r0mM","tlshash":"10a34d8d940b1fff29fd0884a95b5a1020690fd3598cccd3b3aa6e4527ffc94629972d","size":103308,"data":"","first_seen":"2026-09-22T21:15:44.353655Z","last_seen":"2026-09-22T21:18:49.767999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-1a2e0624.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"f42418797a8b4ce9baf4d9b2eaebc823","sha1":"0c8d96e40884ad8c3996b5aefef5335b3d75699a","sha256":"34f4f145fe80aafccfc0d3f497478624d1e5e81e0dfe8757cbe77f781336ec45","sha512":"53c91811dc9160656bf8a2959364c14e6127b4a17926c47fb626d1602a6d283a01793ca583261a08b50b0f99cf75936770dbfdabe6519f2634a1ef7f68762060","ssdeep":"","tlshash":"8101bdf8fd0d8ebb0ea20a4141a13601140a1fddfa1419e198867d661be4950d7de72d","size":776,"data":"","first_seen":"2026-09-22T21:15:44.34796Z","last_seen":"2026-09-22T21:18:49.807657Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/currencyItem-bbc4c5df.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"be8722da836834d6a858aca29ffc0148","sha1":"5b58a3551153920a501b76d927da9bcb88dc6fb6","sha256":"5f55e7c630a9153e2b0609db18b7034666541d820fb46a4f03118612e70cdf7a","sha512":"0dc9a19d131351007b0b40c162fd11b00b44967ea88c2b296957f7ad11138fe3f8bd0bd828aaaf2b807e2648ef3e8b5e92edfeb02266f391cc2c77136903996c","ssdeep":"","tlshash":"0b319c59a901cbb5c7bd9162c1b90415135dbfdb70064682faea244a3bc75fce324a31","size":1643,"data":"","first_seen":"2026-09-22T21:15:44.365206Z","last_seen":"2026-09-22T21:18:49.773066Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/en-1878cc81.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"d67e72876cf3806019ea62cae35c016a","sha1":"90c5d37d0d737e4b081cf805ce58f2d9681a3cf9","sha256":"5ca356f2f09cb0241e71488d06f0752a9d0858d1793de285f56ee5cdc4848ffb","sha512":"e1677fd5141be147981b2a2388b7595df9392d43408149fe7bf39e495cd9d392bb9a99aa7fb179410fc1b211f3d10d3ae5541d3458accfbc02c7e5fb602dd109","ssdeep":"768:+nLctZcEw/o7ruOdAFsifnAMC2rAaAKFVoP6+6sPG9w1mwO6fpk7aOLxO:mL1ponuOdebE2r7FVLsPWwqLxO","tlshash":"d203e7893e1a989a05f3537674ce6e1120f60ac18256881f4fedc9fd53d2b676363b34","size":41190,"data":"","first_seen":"2026-09-22T21:15:44.336518Z","last_seen":"2026-09-22T21:18:49.801877Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.gewk.top/api/common/getAllSetting","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.368Z","timestamp":1790111876368,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://gewk.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gewk.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":444,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":256,"send":0,"wait":258,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/promotion_center.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.080Z","timestamp":1790111878080,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/promotion_center.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dIwsvxZZY4XqD+uQ67F08BOHGwGpiKqu8eeuU/IB5GgsUUdMec2ugm96ZNNP2NXOIld/juXCI8o4jiYnx/rVow+BtrINiQki\r\nx-amz-request-id: 8VMGYNJZC3QTTWVD\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:19:08 GMT\r\nETag: \"1b1dc675d11982bb06b02107edd7f4b9\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 609\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":609,"size_decoded":1063,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1b1dc675d11982bb06b02107edd7f4b9","sha1":"7e73bc43396623cdf7565268ebe1e1dc82eb0e0d","sha256":"6145ac2d19c8e48e009ee4e7f143cfd9c49974ece823aea71ddaf10756a4c1cf","sha512":"4cc8423d7b229e408260f3dc8bfc838467abe17ef13127de375fcd0cf8d4e5a55c63fb4f569d1d67805f5dbfaf783f0dfa0a5ea17ee0a0c4293ff50c646c0f3f","ssdeep":"","tlshash":"e9f00ce02a81bfb4c02249228b2c623668b844d39a94936d48c2ad469d0b809cbdc283","first_seen":"2026-09-22T21:15:44.341523Z","last_seen":"2026-09-22T21:18:49.754697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1303,"timings":{"blocked":-1,"dns":10,"connect":320,"send":0,"wait":343,"receive":0,"ssl":630},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/common/type/defi_activity_type","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.107Z","timestamp":1790111878107,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://gewk.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gewk.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":454,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":966,"timings":{"blocked":193,"dns":0,"connect":256,"send":0,"wait":257,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/resource/fonts/DINOT-Medium.otf","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:57.859Z","timestamp":1790111877859,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gewk.top/assets/index-9d89eb37.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:57 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 73096\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2b2-11d88\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":73346,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-09-22T21:18:49.755434Z","times_seen":7621,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-9d89eb37.css","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:54.441Z","timestamp":1790111874441,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-9d89eb37.css HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:55 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-4a45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304223,"size_decoded":66383,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"cef088889f4d09b5827b6060366c65d5","sha1":"edeb7d47048d8b44b8ca2b71ead17d2cdbf2cdb0","sha256":"9d89eb3744216c6ab5069e705d594e68073d1dec8f62694b5e41e7a8b1b40076","sha512":"b3cb9c9b3642fc28399cedee2de86fb1b9eb4a361b93caefa49a648719afb54f13a1790604198855670159d45a01fc870e298936096431d8a5d38e4b4c8a3f12","ssdeep":"6144:n+B/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05TT:+B/54NZ8w71ZACkFDS3vyf58rBeV05TT","tlshash":"aa54c6a9a590117c6f27aa7597ce9ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-09-22T21:15:44.338894Z","last_seen":"2026-09-22T21:18:49.756239Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1286,"timings":{"blocked":-1,"dns":0,"connect":256,"send":0,"wait":515,"receive":256,"ssl":259},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.gewk.top/ws/3e4edc0e-7cf5-4731-9c4c-78fdb7bb5051","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.361Z","timestamp":1790111876361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /ws/3e4edc0e-7cf5-4731-9c4c-78fdb7bb5051 HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gewk.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 4JU8y9Agn4aqCkfaItZ5og==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gewk.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: pL5R4ENnGgKCWoS1+a+tII+qDUQ=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":0,"dns":0,"connect":259,"send":0,"wait":261,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/filters-ebea64bf.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.382Z","timestamp":1790111876382,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/filters-ebea64bf.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-c1e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3102,"size_decoded":1384,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"b6a819db58d4de92f2191cfaf3c1723d","sha1":"1259386049aca863bc8846254046cb001aaf8637","sha256":"1c96ffa3ff45f4e4dc0d721092c40760999991a150d4694eac41e18b7b01c65f","sha512":"2a2d440a41d7249830d71e9c0f4ffa4d8a1dc024c8dace9f49f072a9d967ceff72e059c5d8c348869d9aa33bc7517cadf461796555b3730a155b6ffa9fc8be56","ssdeep":"","tlshash":"095124edfdd7613356ea6ef940288414728ebe20686e0a4df54bd0455933888e0bf778","first_seen":"2026-09-22T21:15:44.32434Z","last_seen":"2026-09-22T21:18:49.763078Z","times_seen":2,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/ETH.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.094Z","timestamp":1790111878094,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/ETH.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ICeJlleFJc92vhKl5KCWGiS0Lw9KlnmEQ9M6TLYGxyS9ByVFt72dj3RYYMp1afCmj5AjTdYV9ZUXbL2EvqIxvisaOsO5gJoD\r\nx-amz-request-id: 8VMH2D9W4SPQJYAE\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:24:19 GMT\r\nETag: \"174b0414fece541456d82f84a296e380\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 3437\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3437,"size_decoded":3892,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"174b0414fece541456d82f84a296e380","sha1":"b5705bc9d5e6c5d7f70e9a1a2773f7211f474657","sha256":"99bf2102cc13a51bb226f931b8d0fa4c5b3ca9dc4179167e89d7ee3f677c3fdb","sha512":"6a5fb1f896da4d1bda7474e19880294be83017a5da5cd39113adfeb5032cb9b7566e706845209e4312408a99b7305b27a84748637bed44aa2622246bea0bda94","ssdeep":"","tlshash":"a5615d8d039107bec5d46349519fd6698c278705862f4fe84b67c8fc0e99dccc4c6b59","first_seen":"2024-12-25T23:55:17.402619Z","last_seen":"2026-09-22T21:18:49.763807Z","times_seen":108,"resource_available":false,"data":null}},"time_used":1828,"timings":{"blocked":1524,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/SOL.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.097Z","timestamp":1790111878097,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/SOL.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: nHN6XJPtBMxt1UJaWJW22Q68ZJmOTGzp1M4lIE10XxMrpsstg3B5LSOmUIQjrNR6x2yswa79cCZcbF5fNqJgxp3Wm8vrKdNE\r\nx-amz-request-id: VJ2D5RF7VJXM8R5J\r\nDate: Tue, 22 Sep 2026 21:18:01 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:24:33 GMT\r\nETag: \"0bf2916a9c679e99dc9060ee1cc2dde5\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 4222\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4222,"size_decoded":4677,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0bf2916a9c679e99dc9060ee1cc2dde5","sha1":"7b54d567258f440651c4a41d2f955c9c412451bd","sha256":"b9296ce1118a6d150e57049190aeb4c024199e0787e0c6198c244230b8d704f5","sha512":"1749edaf7c45f50df246f209b5d26801f3ec20f449a82a9deff48b348c5fded272fc3cfdaec44eccf27ffb5225774a7ec0c6a564d7a0e558665411d5bc3c8675","ssdeep":"96:hvuOg3LKz5FT+ae8o5VngkGBh6WQZsrHzXIY4:yYdzinN6wCQY4","tlshash":"ed915dd8f39d7610a3c05d3590aa3ff78ec6818c0c258888f926f67c54ad4e11c85e5a","first_seen":"2025-09-08T14:29:09.791256Z","last_seen":"2026-09-22T21:18:49.764385Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2200,"timings":{"blocked":1879,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/bottom/rank.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.102Z","timestamp":1790111878102,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/bottom/rank.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8ZXYPXxoC7sDdCiBMlfFHqB17iC5gEUvbAjpWrEzcrajnj+CVb6ZvoyK8kgqT11oMeTCyLbZoH45ixGoajmpVP+v17LdCBmL\r\nx-amz-request-id: VJ2BRD38AYTS4GMJ\r\nDate: Tue, 22 Sep 2026 21:18:01 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:18:56 GMT\r\nETag: \"10a7982fd24478df9d49b0c45bd1d66f\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 607\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":607,"size_decoded":1061,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"10a7982fd24478df9d49b0c45bd1d66f","sha1":"14dc7849e8a5c1e13632477067caafad86b62394","sha256":"109beaa556e2b1efedef75d3cb1dd5d67811a6c518da8637c52cb7f4189d6e58","sha512":"cab58ef5e91827dc210dfcad4a8a38345f306d0c3ce01aba4a65f12ced05438cbca5966441e5076694c1224756f93fd4421e1fefde9c01069fb1727c00060a4d","ssdeep":"","tlshash":"9af0477b73cfe605a46723a35088879d1c9584649f390ec497e230d7d7514513cace43","first_seen":"2026-09-22T21:15:44.352485Z","last_seen":"2026-09-22T21:18:49.76492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2534,"timings":{"blocked":2233,"dns":0,"connect":0,"send":0,"wait":300,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/bottom/pay.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.103Z","timestamp":1790111878103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/bottom/pay.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: pD0uw0vhxcLOQ0FRFjolARRc47rarh7KdoIVbgretvcuNhJ746Lro8+V+PH1Wo/p8oAvDdgTJOIyIjfDYEQVIRf77Ngbqt6U\r\nx-amz-request-id: VJ24X68NT7JCAHCB\r\nDate: Tue, 22 Sep 2026 21:18:01 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:18:54 GMT\r\nETag: \"010ddd08335b1188036f42d59850b617\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 558\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":558,"size_decoded":1012,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"010ddd08335b1188036f42d59850b617","sha1":"98e3e00867854809d47f0129b4dcfcfb6b5156da","sha256":"751027a64be19ef70ce88ec80db21e3a67e4a8e40e237480ed06c1f254d9c180","sha512":"96e52c0a90eb24a1eec9812726fe5e600914180babea82e6374b99aacba46482bf3de43c693a5bba6abab189f30f745d2c8a12a94f64110dc940830aaf27b4ad","ssdeep":"","tlshash":"1df0209b356afe91d8360af298e34b5508c272a48203773e621ce435a76610ea8846e3","first_seen":"2026-09-22T21:15:44.349362Z","last_seen":"2026-09-22T21:18:49.765543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2625,"timings":{"blocked":2325,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/banner.jpg?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.812Z","timestamp":1790111878812,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/banner.jpg?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: FdjFvrNYEMv5bJGCW9CMJHudQ8R95FCXPDu6OAAxKw037e5KOTnbiZ+dz1V4nWLtMviiAHdB1/5YqonQva7Dzd0fPW0DVmtv\r\nx-amz-request-id: 8VMY7J5KW3NMAPP5\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:25:17 GMT\r\nETag: \"83c4b9b63739e7585071e91551a50675\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 103906\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":103906,"size_decoded":104364,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1138, components 3","md5":"83c4b9b63739e7585071e91551a50675","sha1":"d514ebc75640b454fee45d7bfc55119eebab7d22","sha256":"6af82591225031dc8fefb4fb7821fc56109f26d3bd0d0df3108efe3dfa4cc2d5","sha512":"37bc36909e7a0df3304137b34990921070f8fe210a9a0ba3ade99dd42688bcdbd695b001aad3862531a204685d9e31bd204c6987a1527e13343eb06bb683faa4","ssdeep":"1536:EctElCQRmnn6B3iL0YXS4tDSansjU+VDWaIHHgJA9we8BSEf1018p8A6Yn72GEO7:EcAFRm6AL090D1sjU+Vaay05pjNwGF7","tlshash":"76a301dbaba3ba0be38555b5065b6f337cd6da0d04afc37d20000e772da69385f91494","first_seen":"2026-09-22T21:15:44.311836Z","last_seen":"2026-09-22T21:18:49.766359Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":298,"receive":821,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/notice/list?key=ROLL_NOTICE","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.106Z","timestamp":1790111878106,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://gewk.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gewk.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":454,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-bc011be9.css","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.378Z","timestamp":1790111876378,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: text/css\r\nContent-Length: 397\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2c6-18d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":627,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-22T21:18:49.766945Z","times_seen":1585,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/resource/svg/light/zu447.svg?2.0.1790108358395","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.092Z","timestamp":1790111878092,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1790108358395 HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 420\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2b2-1a4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":655,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-09-22T21:18:49.767475Z","times_seen":553,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-3c891471.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:54.432Z","timestamp":1790111874432,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-3c891471.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:54 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-1938c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103308,"size_decoded":28594,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65457), with no line terminators","md5":"3703e035e31e0726211e9c9f2b9d2ac9","sha1":"0736156424a1d68b91803c6d6922e130392f37a9","sha256":"7c39f49e9ec431b4be69af33907fe8bc1a60fca4ff0698af982ef55e0b3fce82","sha512":"735cfb2ca23e94777038cf97123abc055d1a4ebbe0574cb3e75f4d8aaed8ebce7eef7204962c95aef97e4ae0e7b3eed9babc5de1a02b7f6e87c72ee362b4c9dd","ssdeep":"768:YD6tmDghNrTXpdRn2Ht14FGmYzLb5DuIXX9IiMJV32/q2HtUuiConYxoU/KBIQff:CWtldYrvJZBvtUxCSMCgpBlgAl5r0mM","tlshash":"10a34d8d940b1fff29fd0884a95b5a1020690fd3598cccd3b3aa6e4527ffc94629972d","first_seen":"2026-09-22T21:15:44.353655Z","last_seen":"2026-09-22T21:18:49.767999Z","times_seen":2,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/vendor-eb205ae6.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:54.434Z","timestamp":1790111874434,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/vendor-eb205ae6.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:54 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-d69f9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":879097,"size_decoded":290781,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"02759b80e530bee3460c1747943c3e95","sha1":"d3151627784736dd9999a98f06bfcb2ab9f9561e","sha256":"70803b0026cbaee22493f49c638d3b795bfdedd46a91eb6a618bbd3f63c51298","sha512":"c46767425509f567a6548f782c6c09772b7ec20692d5c997eed0c7a834174d98dfaae0d0d9f3ced483c640869f2a9948edfb1d333feb91ef29d59752ca727b74","ssdeep":"12288:MWVxNiVrzNfnGMEAaFujpEgjWR8tSkHpcE13WYdWzoE0KEXYcba2VW:MWVHiVRntEbFsEetSkHOzYdWzoEYa2I","tlshash":"291529c97292f06147ab24e240bb0006f3396e59744e8494f1add8db7d6ad89e277f3c","first_seen":"2026-09-22T21:15:44.325781Z","last_seen":"2026-09-22T21:18:49.768567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1569,"timings":{"blocked":-1,"dns":0,"connect":259,"send":0,"wait":528,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/platform/dev/config.js?1790111876357","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.359Z","timestamp":1790111876359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /platform/dev/config.js?1790111876357 HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 382\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2b2-17e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":382,"size_decoded":626,"mime_type":"application/javascript","magic":"ASCII text","md5":"501cd21a6e6f56aa118515f9a73195cb","sha1":"5769feb45ddf1b4aef74de35790a2523364c2f87","sha256":"690e8c5f3e3d29086390ed4d44617d05f539d8026ce72ebdf453a38605e1961a","sha512":"18926d24488999f6c2b44439d2216a45c276e7466201c2e0147d8b8efd4e655e9b43d9037049bcea5cd181b133ad447f8e2a87a2df0e0f2d220e5d67aa4ae37e","ssdeep":"","tlshash":"52e068b6327cc0745484862a6dfc1427f6dba6738d9c1e2eb4c4aa096e4dd6820b8092","first_seen":"2026-03-23T14:50:53.523647Z","last_seen":"2026-09-22T21:18:49.769136Z","times_seen":4,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-48c7a672.css","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.388Z","timestamp":1790111876388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-48c7a672.css HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-27a7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10151,"size_decoded":2345,"mime_type":"text/css","magic":"ASCII text, with very long lines (10150)","md5":"842a9d0c045944e2237e265693c8c3e2","sha1":"ac649cbcb2e9f9a3fe6fc4cdeafd8005c4f0dbb5","sha256":"48c7a672b1a608855a293b4f385a14d35be7ca358ef0de4c02c00663424779d7","sha512":"a8d1b5bbd74766c07380600105a7419df374778755dac2c701f63bd213156205148d0237177a9820a7e0d3818e1e8b694463a9416c4469a25a1de29f1dbfab80","ssdeep":"192:EXXvx4kh3mqOyI5cL4IVeYDd+5Y6LHmLkBfW:EvDZWW","tlshash":"0e22563df6a62238ac7be199bad44ecce51eb901e693dda4f61785264cc76e3173004c","first_seen":"2026-03-23T14:50:53.560119Z","last_seen":"2026-09-22T21:18:49.769766Z","times_seen":4,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/BNB.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.097Z","timestamp":1790111878097,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/BNB.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9eT1ts4TBYwGVnFLxlQYv++eD1OGB1bTZAcRlLvq0jtGCP4KFsuaKwmUpH3vG19Wu4AUjSus9VuN2fA/8c62dCZVen2v5QDA\r\nx-amz-request-id: VJ21Q3AQJCKS8JVX\r\nDate: Tue, 22 Sep 2026 21:18:01 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:24:27 GMT\r\nETag: \"fefe5d0b26806c858130f0eb454e1106\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1494\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1494,"size_decoded":1949,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fefe5d0b26806c858130f0eb454e1106","sha1":"8f540e4d9b853acc0145bd37ec42fdeecd7f15f7","sha256":"7aef69406a4a5c74bd3569222a4fb3e534c8c6c1446755fdec7d7687bbf38a04","sha512":"98af45cf72a49d0776a57edc8cecb299d206723d1772c64439738e508f27ab92f0a06608bb76023267a34a8b433cec216329a8847836fc381f818ed2487fe3ff","ssdeep":"","tlshash":"2f31fce221413443e91adab851af83637ce009a05b8392456dd576d7b779ac45b44812","first_seen":"2023-08-29T23:22:40Z","last_seen":"2026-09-22T21:18:49.770335Z","times_seen":98,"resource_available":false,"data":null}},"time_used":2133,"timings":{"blocked":1828,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/TRX.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.099Z","timestamp":1790111878099,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/TRX.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yD33gsLtqQr+oRHkjE2p1X5Nadf5Bvw9WMgh/+8wlAwjRM0YUy1Kc0KXU9Pd+Ck/m0FK2tPQNo8QGOLLc0G6wryYFcYg/tWM\r\nx-amz-request-id: VJ28T510PAKNV21C\r\nDate: Tue, 22 Sep 2026 21:18:01 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:24:35 GMT\r\nETag: \"4485ad0ffccf92c98a17fbc03505699a\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 6884\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6884,"size_decoded":7339,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"4485ad0ffccf92c98a17fbc03505699a","sha1":"491829698bcdfef16a76dbd51179a9407eb3b15d","sha256":"91329e8a180b0fc75f4b8b4cd252a64e4f13f33edf4aa6664fbde442cedff001","sha512":"1596e5a7cc7c103f73df1a61fd50c377fbeb4b0b71c8d6aabe7d0d021f7cdfd96679f33352527d74688cc2f2b5f6a1488f46b21e3d2d7d2f578a79f6f8e64ffe","ssdeep":"192:bya20oqaVgVwA5+c+Eq3IHUUDrHph1LbpwxS9wgF:byGoje6ol+xadLbbRF","tlshash":"62e18f13d15e5e08c6cf21308773564b6facc5307e0eb2c12f76a6514d2ba809fa132e","first_seen":"2025-08-31T01:19:13.315017Z","last_seen":"2026-09-22T21:18:49.770885Z","times_seen":52,"resource_available":false,"data":null}},"time_used":2443,"timings":{"blocked":2133,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/resource/fonts/Arial.ttf","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:55.765Z","timestamp":1790111875765,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gewk.top/assets/index-9d89eb37.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:55 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 1047012\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2b2-ff9e4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047012,"size_decoded":1047264,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-22T21:40:26.146749Z","times_seen":8259,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":787,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-8f252d21.css","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.374Z","timestamp":1790111876374,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-8f252d21.css HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: text/css\r\nContent-Length: 61\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2c6-3d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":289,"mime_type":"text/css","magic":"ASCII text","md5":"64a6e0c70d0734eb067de41025695c61","sha1":"3daf9734bdfc9e560f098cda9e73c926ff417cc0","sha256":"8f252d21da9b1d0151bbe1db628bfea000d4a662b1ea0a42047e42c696b4bed7","sha512":"ccd349b7fcc9f5202a6ce9516c4d66b482140a85df80d9777b3957d0cf5380689fc17877be168c95b526f3b74d36fca4ff9aaba796421f900f9f27255e403ff7","ssdeep":"","tlshash":"54a002ad115a3914b2224341ff0ae90dce6869739a91520567021da135cba4e655920b","first_seen":"2026-03-23T14:50:53.594382Z","last_seen":"2026-09-22T21:18:49.772294Z","times_seen":4,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/currencyItem-bbc4c5df.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.385Z","timestamp":1790111876385,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/currencyItem-bbc4c5df.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-66b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1643,"size_decoded":960,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1642)","md5":"be8722da836834d6a858aca29ffc0148","sha1":"5b58a3551153920a501b76d927da9bcb88dc6fb6","sha256":"5f55e7c630a9153e2b0609db18b7034666541d820fb46a4f03118612e70cdf7a","sha512":"0dc9a19d131351007b0b40c162fd11b00b44967ea88c2b296957f7ad11138fe3f8bd0bd828aaaf2b807e2648ef3e8b5e92edfeb02266f391cc2c77136903996c","ssdeep":"","tlshash":"0b319c59a901cbb5c7bd9162c1b90415135dbfdb70064682faea244a3bc75fce324a31","first_seen":"2026-09-22T21:15:44.365206Z","last_seen":"2026-09-22T21:18:49.773066Z","times_seen":2,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/DEFI.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.070Z","timestamp":1790111878070,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/DEFI.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: a11S+ppPoOwpzvzum4jflXK+FdN1fwovx8SBJOYdhVt2PVenpZqnDz7yyAE/wPzyrJHf7urMxg07TXSM1qevoCNd50AoDed3\r\nx-amz-request-id: 8VMZAVMQDCMRF1FP\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:18:58 GMT\r\nETag: \"7d5795bd1f0018ee357ccf9bfe5fddf2\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 572\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":572,"size_decoded":1026,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"7d5795bd1f0018ee357ccf9bfe5fddf2","sha1":"8dc370598d77048d47d5838aebcd5d2ca977cb15","sha256":"2a2d06232a971b1d42d16f165d50cb6bf6b73df33561769fc673dee016056ce4","sha512":"aa9d5acfd38d851fcac81a1b3d919e23ccafb3ec86e7e4fc7ef48897ceb773c8c76383b1886d9376207335669a4ece91e21ff9ded2430d3b5c4d4fe99c11f66a","ssdeep":"","tlshash":"73f09693196a8522d0a2d3161cb331a1cc793c255622fcd0fe081d70c178c53a5d831f","first_seen":"2026-09-22T21:15:44.329905Z","last_seen":"2026-09-22T21:18:49.775583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1249,"timings":{"blocked":-1,"dns":19,"connect":302,"send":0,"wait":329,"receive":0,"ssl":599},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/resource/svg/light/mengbanzu12.svg?2.0.1790108358395","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.088Z","timestamp":1790111878088,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1790108358395 HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 802\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2b2-322\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":1037,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-22T21:18:49.778145Z","times_seen":1083,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/charting_library/charting_library.min.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:54.430Z","timestamp":1790111874430,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:54 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 22 Sep 2026 20:18:57 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2b1-2a6a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10858,"size_decoded":3455,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-22T21:32:31.319196Z","times_seen":1481,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/vendor-72ef657d.css","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:54.436Z","timestamp":1790111874436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:55 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-16997\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92567,"size_decoded":37851,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-22T21:18:49.781259Z","times_seen":394,"resource_available":true,"data":null}},"time_used":1314,"timings":{"blocked":-1,"dns":0,"connect":262,"send":0,"wait":538,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/trade_tab6.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.085Z","timestamp":1790111878085,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/trade_tab6.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BCVfF2lHUDVtjJpLwfonPDRIwAyluXctP51EU1WeRH74WQj6vUsVy/gNz3W61C1TAienyiw4zuO4ODJD2N+dvd1RoXdJWseO\r\nx-amz-request-id: 8VMM0M17BYQKGBRB\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:19:14 GMT\r\nETag: \"e79917108a557c2a6b442190c43876a1\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 613\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":613,"size_decoded":1067,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e79917108a557c2a6b442190c43876a1","sha1":"913a559b6bcc6e0072342a3e6cd6d6e136b13f4b","sha256":"c04197b7ebfff277ee320babb3dc6951055c620f3a93d2db71c49af4a97a89a3","sha512":"065bfd336ed8c11c2b734383e50ccda2d861a01d24f83550c015f7da1b4fe7ce5339296e8938184770ebb8b06bdbf6272f8d9b6d448e64052c3515de647fafac","ssdeep":"","tlshash":"f7f0027a67381d7889eea77f5e43dee029305524eb35874a8843b8e03409993598a843","first_seen":"2026-09-22T21:15:44.356226Z","last_seen":"2026-09-22T21:18:49.783946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":-1,"dns":5,"connect":274,"send":0,"wait":296,"receive":0,"ssl":551},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/XRB.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.095Z","timestamp":1790111878095,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/XRB.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LUe7C/PE1Rbq0PBzPUYnwKRH6pg0o+Ww5spM3IfbZ208sBq7izr4aw5RSfhFJzmR/yK+HDaioO0WST8SWLBAIb2rYb5NomJ7\r\nx-amz-request-id: 8VMX5HGTAH7WVW2N\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:24:22 GMT\r\nETag: \"2308acc5cb079e77004f6ae91cc7b051\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 2393\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2393,"size_decoded":2848,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"2308acc5cb079e77004f6ae91cc7b051","sha1":"8f720c008e92589aecad00f9338e63dff7dba67b","sha256":"0875539d872ac02066c129360ade039e835bd7b9b2320f3a4d24ed4ef72c3051","sha512":"b18ef5a99aacedf38a3cfa584a8451df96097682fa4dbd5f54fb2ec4011811e3e800474dd5306d64f588f92e4210be0568725038b8664863f45dba12ba3d4ddd","ssdeep":"","tlshash":"f6410ba2c3b63a51b428f219ca4b044d150abeae3534f074714e365fe67d3637aa9051","first_seen":"2025-03-09T08:32:31.721939Z","last_seen":"2026-09-22T21:18:49.786968Z","times_seen":61,"resource_available":false,"data":null}},"time_used":1880,"timings":{"blocked":1559,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/bottom/home.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.100Z","timestamp":1790111878100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/bottom/home.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: FwGkhiZFRY//nY3hToLrtfJzCmhI2qqk53DsMID1bpBKINIGcfaIcDyUedlyFVR0zyq0QEDnzM0YdNhnhkZ90ue0jNwTBSFw\r\nx-amz-request-id: VJ212N3DG01T3FQX\r\nDate: Tue, 22 Sep 2026 21:18:01 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:18:50 GMT\r\nETag: \"c6a4aa9648eda2b9f9a7eacee277f047\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 671\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":671,"size_decoded":1125,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c6a4aa9648eda2b9f9a7eacee277f047","sha1":"77b0bf30235baf20e998a000457163234e9feed3","sha256":"7ae08eeaa567f1d96d709e99b40ff86d9de6528c6f3f4d56eaa50e427f5c0766","sha512":"0d8ab9acb9a74487f5b999b6d09f28f1b02ee7b546d952143a49fd2ff0b38fc4c10c4563113c48cf12949f08184547948c52d5ccee35b4bad8d3c20e42a4a330","ssdeep":"","tlshash":"4501832706c96330ddbbf137a181a3e62e135ab32832eda8ff096815c0364c06897300","first_seen":"2026-09-22T21:15:44.344977Z","last_seen":"2026-09-22T21:18:49.788765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2523,"timings":{"blocked":2200,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/flash.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.075Z","timestamp":1790111878075,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/flash.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GAwBe6C3fqDhntwm4cSQ2LEnurY53rTvruszkrbKC+OB69zhybDBuCI+Hi/qynYggQMAsQ6QYIlUr3Dj9bXLvHyx6uOX5iDY\r\nx-amz-request-id: 8VMWTWDYVG2PCRM7\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:19:06 GMT\r\nETag: \"a82174711b54bc6771bd0154cf40f3fc\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 591\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":1045,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a82174711b54bc6771bd0154cf40f3fc","sha1":"c43c3df3f10d9a9a3849d540b60491d92d289346","sha256":"8dd416b3d0dfdb4b758d82ee9f20a086dd9a78f6f37c51e2b05265d267a9ac3c","sha512":"11e1459d9c732b018def83ce3e6eb33058be7873850d5ee91ea972c53c28b7595292d60697a67427ea5a91996e6d47cf56687338c8ade27c2b2292cb36fea1eb","ssdeep":"","tlshash":"6cf047c62e838475bee841183964bc00543414648d7d4f0df8d3f8e57b1d649b560a42","first_seen":"2026-09-22T21:15:44.363961Z","last_seen":"2026-09-22T21:18:49.790368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":15,"connect":284,"send":0,"wait":308,"receive":0,"ssl":570},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/financial.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.086Z","timestamp":1790111878086,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/financial.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UGrRBTHnzDK8ISMd8RcL516Q4YKxLQpn0ctUCCu9cHk9iiUH4NkHa1rfdJctBWI0NicdRtW45oz3IMPqDspwk7xqBWp5RDKp\r\nx-amz-request-id: 8VMPYCQNQ8CZ7BJH\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:19:04 GMT\r\nETag: \"4f1dfd6250226229e8559b77a578897a\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 596\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":596,"size_decoded":1050,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"4f1dfd6250226229e8559b77a578897a","sha1":"01bda7c206f0f184dedf40d20a7945066481bbd7","sha256":"968691f0176f10bc358ff8b7b68a7f284571ff6fa1f972303c0b3949d9c2ef0e","sha512":"835711d39afabe5d2031d7e50f6e53ac01af390fb0f9fb2fe47bf11a9656a9a563b1f1814ec8bc85757eb68ee79a3cf6a1b6623a8411be4d39e01cffc0b501d6","ssdeep":"","tlshash":"e4f0029cd3d71c769a76076347490d28841d261808080f2cc29f7d55a4b67aa681aa33","first_seen":"2026-09-22T21:15:44.357498Z","last_seen":"2026-09-22T21:18:49.794685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1525,"timings":{"blocked":1213,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/LTC.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.096Z","timestamp":1790111878096,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/LTC.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ibHxhA8yuNtuhteNA/hRpihIkkGIJuCFbiTMG8XEgyKbb7X7JTu1q+rcwq+hWyEurI9fye8p/94MNQtO6JoUKL70UaLFculZ\r\nx-amz-request-id: 8VMXGQ84AJY3CND7\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:24:24 GMT\r\nETag: \"95507ffd15fb458032339c7dc775ed70\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1660\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1660,"size_decoded":2115,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"95507ffd15fb458032339c7dc775ed70","sha1":"e374f127ccd850868577125ddda835210f9f9c12","sha256":"7160750bcbc115ac8a3229bc1120fb59e96a737d607a57b42fa8e2b092a14159","sha512":"6fe799554171ee690f22ad0c86752f8ee12826ca378e15a0531b50d1f84458805ca6abc9ff8684bd62171afda6ed546ed21ae7dfb6689de65a248351fc1f3a58","ssdeep":"","tlshash":"82311a099a662da282350f2ae84c6128cd012340cd0123d7fbbdfc12d2e81c1503cea0","first_seen":"2025-03-09T08:32:31.736669Z","last_seen":"2026-09-22T21:18:49.795628Z","times_seen":80,"resource_available":false,"data":null}},"time_used":2351,"timings":{"blocked":1616,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/platform/dev/favicon.ico?2.0.1790108358395","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:57.100Z","timestamp":1790111877100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1790108358395 HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:57 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 25871\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2b2-650f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25871,"size_decoded":26108,"mime_type":"image/x-icon","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"e3647298ed17654e424e41d27b08170b","sha1":"6428ddc3ed3b0587a6dd8ddfa614301663b7d2b4","sha256":"7aaf20df416596c067ae7587a4120fdc010725a0b889663837c529eca297f29a","sha512":"2784205d2974000f2fc547ccf440931b78a34cc04324d40b9600311f4a905039a7f67f7e90bc0effd961fc943e9d29628e0e8cfa678494c1a22f150bee8db193","ssdeep":"384:h6DbRkfbP3iHuGoEQSDVnm45Gk0U+Cc+VKtgcQcXL9:h6XHqEnDVnr5Gk5+Cxzc3XB","tlshash":"9ec2afa1fcd531942c01953225e3a41e48b2898bef43dd82bbdd40aaef12f559c9f58e","first_seen":"2025-09-12T08:50:03.430349Z","last_seen":"2026-09-22T21:18:49.797192Z","times_seen":14,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/sport.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.087Z","timestamp":1790111878087,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/sport.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 4m3GqQ9Y6ne3JdN+sekeLP6DkGVPDVSoCPYIuNSaV9F6NS3XsbfFis6/rOw1zpa5+VytzFnT7PiulN76lecbnWaN11xO9iDo\r\nx-amz-request-id: 8VMVSK1028PTP3VV\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:19:10 GMT\r\nETag: \"b382c9c5e6172f944621eb84e87f2c1f\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 586\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":586,"size_decoded":1040,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b382c9c5e6172f944621eb84e87f2c1f","sha1":"4629be8ce698826b1b4552d0c5c690410069cd9d","sha256":"d096867b1c40933d3112728b64925d032542414748bcce41a061d73c12fee8bc","sha512":"f90d2b30aa74eb443a62d6d461fc7cc031aaf5a9ca6cac1c70bc5e5039e3b05618ae27fa29f2f31d9de572193ec7f08ec56c4456fee95819c6298f2b7f737e71","ssdeep":"","tlshash":"f6f0479363fecef58dd370231a1ac639b832955364570e04699c9d58142bc543530b47","first_seen":"2026-09-22T21:15:44.315535Z","last_seen":"2026-09-22T21:18:49.798971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1560,"timings":{"blocked":1237,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-6fd70a6c.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.369Z","timestamp":1790111876369,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-6fd70a6c.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 388\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2c6-184\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":388,"size_decoded":632,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (387)","md5":"237a03c82818b645baac8606f711d060","sha1":"96ab01e376219130f524b96ca57c88a8c9028d8a","sha256":"874f89299953cf9ad8c21cbdfc3dcfd1d335ac17554a65a1fb25a0575465a68e","sha512":"2818cb5d71d71d3dd80cf73575fd2bf2298c9b7d9c23ab3d2cbc4c520ca74870a37d046ef5672848aba71a2693f7696d53c3dd56af55d8312dc802a840a713db","ssdeep":"","tlshash":"80e0f10f195ac2f227a38cfce1330811610426441300e180e1031608a2780d3a05f378","first_seen":"2026-09-22T21:15:44.318777Z","last_seen":"2026-09-22T21:18:49.800006Z","times_seen":2,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/common/getCoinList","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.372Z","timestamp":1790111876372,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://gewk.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gewk.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":444,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":256,"send":0,"wait":257,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-7d4bfad5.css","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.380Z","timestamp":1790111876380,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-7d4bfad5.css HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-a01\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2561,"size_decoded":1024,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"85838485dbb48b6c0fd21a4b7cb05ae1","sha1":"23522fbc988251ad13175307434686f3c84522c4","sha256":"7d4bfad539ab4f6c71f1e9f0b3d34b67827da77970f2519be4de6b55f7041c63","sha512":"7f75886b8b3421c8c4d00b071a8243e319d5b83786ae85d024c6cbdf8675d896792b6ffb203b208ab072efb8e8c45c0ce620afd2601889b40b670d10bc005468","ssdeep":"","tlshash":"2e51504dfaa412355d37d9cbbe545a9cd0207e82e08a9ec1f10b961609cfea71d2031e","first_seen":"2026-03-23T14:50:53.519656Z","last_seen":"2026-09-22T21:18:49.800943Z","times_seen":4,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/en-1878cc81.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:57.499Z","timestamp":1790111877499,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/en-1878cc81.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:57 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-a0e8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41192,"size_decoded":12795,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41169)","md5":"d67e72876cf3806019ea62cae35c016a","sha1":"90c5d37d0d737e4b081cf805ce58f2d9681a3cf9","sha256":"5ca356f2f09cb0241e71488d06f0752a9d0858d1793de285f56ee5cdc4848ffb","sha512":"e1677fd5141be147981b2a2388b7595df9392d43408149fe7bf39e495cd9d392bb9a99aa7fb179410fc1b211f3d10d3ae5541d3458accfbc02c7e5fb602dd109","ssdeep":"768:+nLctZcEw/o7ruOdAFsifnAMC2rAaAKFVoP6+6sPG9w1mwO6fpk7aOLxO:mL1ponuOdebE2r7FVLsPWwqLxO","tlshash":"d203e7893e1a989a05f3537674ce6e1120f60ac18256881f4fedc9fd53d2b676363b34","first_seen":"2026-09-22T21:15:44.336518Z","last_seen":"2026-09-22T21:18:49.801877Z","times_seen":2,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/defi_host_lockup.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.072Z","timestamp":1790111878072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/defi_host_lockup.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: EWZTC1ie1pRNxXsh/m+HcgL+fn2OLVxCVMGH1EojMju2j6Y1FJyQ6HWFe8Hsl3U5GOaPdEWIlmkqL46gsGBje4fq8gSVuc3T\r\nx-amz-request-id: 8VMQEWF0Q98TDTH2\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:19:00 GMT\r\nETag: \"b925d599162d54b8a212ac898237d5c3\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 562\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":562,"size_decoded":1016,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b925d599162d54b8a212ac898237d5c3","sha1":"a4055ac487c899a0696f230a9ad4dbe735ccf70e","sha256":"3e25026b8943417839c0050f05c4839f6ac4c0ff577e40307cda4cec236cf41d","sha512":"8bda735d652d3703eb48f8a968b4640388c25f3c5d60f9381aac5dd382c4955622615fd52e12d050ac04267df1e482589f011ef057b4a55a43b62569fa885bc9","ssdeep":"","tlshash":"34f0968bfb041f088a3890f300039034e97e1111040739fd9ea872f89812048eee1e73","first_seen":"2026-09-22T21:15:44.367362Z","last_seen":"2026-09-22T21:18:49.804181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":-1,"dns":18,"connect":285,"send":0,"wait":308,"receive":0,"ssl":563},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/bottom/money.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.104Z","timestamp":1790111878104,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/bottom/money.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dceMasv/axl2eGQYObLeZZv1LL4GwM+6k8Kz9xX3RnU4wXFc1GEk54zdtr/MBUTPTvlF06iZzyKQdAO8q6sV5kLw5JM3Yww1\r\nx-amz-request-id: VJ23XQZA4DE55TD9\r\nDate: Tue, 22 Sep 2026 21:18:01 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:18:52 GMT\r\nETag: \"92daabb8d1c9ff2915f7f9c5593aa63e\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 542\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":542,"size_decoded":996,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"92daabb8d1c9ff2915f7f9c5593aa63e","sha1":"2f1757be5238609ba2bd6fc258cbc24022f5adb4","sha256":"56b944b789525f1845ec1023dd3996fd89bab85f40e5c4a836e93d88e7583f2a","sha512":"b399c38b91c776c2acb933cc3d16d3a656c4456752e3c3d663fb35753916eb589a077a26fbfb7397395134eb7039b2936880ea5e31ace011991613f4e3d0b877","ssdeep":"","tlshash":"5bf02663531443f8e54005f945cba1c90d624a259d316e889f46c0657816c15b7b53c3","first_seen":"2026-09-22T21:15:44.358828Z","last_seen":"2026-09-22T21:18:49.805372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2688,"timings":{"blocked":2351,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/common/getAllSetting","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.106Z","timestamp":1790111878106,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://gewk.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gewk.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":454,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":181,"dns":0,"connect":256,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/DOGE.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.098Z","timestamp":1790111878098,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/DOGE.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Rcz1tdXnCtscN5E+puRZlCfzkuajGOKT/EpSmrOAo7arGsr93hL9/D8yU+9j30lIm5RPREOvCUN9dcVRtvViOPP9m46GIlYa\r\nx-amz-request-id: VJ210W626GNJRXFY\r\nDate: Tue, 22 Sep 2026 21:18:01 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:24:41 GMT\r\nETag: \"1938a5ea7cbe7458795a834563258ced\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1597\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1597,"size_decoded":2052,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"1938a5ea7cbe7458795a834563258ced","sha1":"d969fd854e1a997b7817ba60800cc1c7a6a1423b","sha256":"4a789f36f6ca12a6d1901ab8441a9cab7a4a9a5fd4ba87c887c4d45c729fffce","sha512":"e940ff74f8cb4f53b7463bbcd2b118e9d7c818eb8d2ab0a2ecfdce172e98cb91c44a4d5acd49402b12803c2b273d5ce3f96e1295ae612368bfb78e7f619546e3","ssdeep":"","tlshash":"bc319846a655c394f3cd0711c30b4a56215e579c786170c056b9a863cf393a8d5fef71","first_seen":"2024-11-30T11:37:49.082714Z","last_seen":"2026-09-22T21:18:49.806316Z","times_seen":89,"resource_available":false,"data":null}},"time_used":2233,"timings":{"blocked":1938,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-1a2e0624.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.377Z","timestamp":1790111876377,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-1a2e0624.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 776\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2c6-308\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":776,"size_decoded":1020,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"f42418797a8b4ce9baf4d9b2eaebc823","sha1":"0c8d96e40884ad8c3996b5aefef5335b3d75699a","sha256":"34f4f145fe80aafccfc0d3f497478624d1e5e81e0dfe8757cbe77f781336ec45","sha512":"53c91811dc9160656bf8a2959364c14e6127b4a17926c47fb626d1602a6d283a01793ca583261a08b50b0f99cf75936770dbfdabe6519f2634a1ef7f68762060","ssdeep":"","tlshash":"8101bdf8fd0d8ebb0ea20a4141a13601140a1fddfa1419e198867d661be4950d7de72d","first_seen":"2026-09-22T21:15:44.34796Z","last_seen":"2026-09-22T21:18:49.807657Z","times_seen":2,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/currencyItem-01e3ae48.css","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.386Z","timestamp":1790111876386,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/currencyItem-01e3ae48.css HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-6d6\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":767,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"8b9574763e66b950142f8a22fde428ba","sha1":"358e7d63fd21b93a980f7ccfdea432c273706adb","sha256":"01e3ae4806b84a1f7ae0def6021b0fdf64039d735035d997e09ccb697730ab0a","sha512":"c20cde8312f587c548914fd60564f0b9fce90978ea36ec189431ff015eca930ff463e44e58c7e8e629c8ab173a4932522fb49cbd1b5500500ac6143e39a0b9da","ssdeep":"","tlshash":"b3319c8463150774f93ac4ce6ea8094c91643f82900796cde8cb0b272dcbee36b70d6b","first_seen":"2026-03-23T14:50:53.525351Z","last_seen":"2026-09-22T21:18:49.808625Z","times_seen":4,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/resource/svg/light/zu29.svg?2.0.1790108358395","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.091Z","timestamp":1790111878091,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1790108358395 HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 840\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2b2-348\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":1075,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-22T21:18:49.809321Z","times_seen":1021,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T21:17:53.478Z","timestamp":1790111873478,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:54 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-14c1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5313,"size_decoded":2083,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"2d3dba904f9786b9ebf8af36f8402e59","sha1":"c53ee81fd0613521af7621101c7f5baba3da8c3a","sha256":"0de738fbdc1d8ceeb18aae7264ea266e89430ed0fd13ad166fb2609ea098f6c1","sha512":"b72f7d2b8a8bf4353e7f789aa03f99e93c59654875039f9d6ccbc3d0f573b1ff3049e42b70fd69698d4d7bfac7ccb241af40387f59bf91ed0c6ebda49dee045b","ssdeep":"96:Tr82l35yKuX671l4mt/ujr6TCZydHRH/gN2mUsGKAiowGpuB1niHJiHzH/w:TFZu67l+ZCxfo2nfD3bpuB1nipiTfw","tlshash":"02b170b76df0c85a2362052beadbb0189b6255a3861a4854b4cc80ec4fd4fd5c9dbb70","first_seen":"2026-09-22T21:15:44.313707Z","last_seen":"2026-09-22T21:18:49.810303Z","times_seen":2,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":3,"connect":259,"send":0,"wait":259,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/resource/svg/light/user.svg?2.0.1790108358395","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.064Z","timestamp":1790111878064,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1790108358395 HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 551\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"6ab2e2b2-227\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551,"size_decoded":786,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-22T21:18:49.812609Z","times_seen":477,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/heard/fast_help_loan.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.074Z","timestamp":1790111878074,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/heard/fast_help_loan.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jXvO50PIuqIVIkC4NYpGgkD6s54HBwPTOClt2AA9Vb+TCSwc6+Uu+ic92P+uH9ElGvrLNi0HBNDnQy8xLv7t7QdNdVjsYTJ0\r\nx-amz-request-id: 8VMQMK7N2NYPT5A3\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:19:02 GMT\r\nETag: \"d29aedc90ca88ccb962211c356aa04dc\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 593\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":593,"size_decoded":1047,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"d29aedc90ca88ccb962211c356aa04dc","sha1":"2c36a19b71ab33d6c665ffb9a14a086a0fb32018","sha256":"62129d922ba45d102f971bc4c7d0c41f1635d05ac5d6c01169aba08e59b7a852","sha512":"c92791fc850c73f85a9304b5e4beba62bf5fa6d79c8a7af3054386b01d163d29a21a18ca08c420fd852e44c45293bd316514a4b3c6f2ec017d038621b517239c","ssdeep":"","tlshash":"72f047d1e0e668f6a4bcd95c25942d917db70c712713318dc25f781a412e4366117d42","first_seen":"2026-09-22T21:15:44.354931Z","last_seen":"2026-09-22T21:18:49.813464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1972,"timings":{"blocked":-1,"dns":16,"connect":276,"send":0,"wait":296,"receive":0,"ssl":1383},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/resource/svg/light/mengbanzu13.svg?2.0.1790108358395","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.089Z","timestamp":1790111878089,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1790108358395 HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2b2-4b2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":885,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-09-22T21:18:49.816826Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yun-zc-api.s3.ap-southeast-1.amazonaws.com/gewk-static/images/currency/echo-res/BTC.png?2.0.1790108358395","fqdn":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","domain":"yun-zc-api.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.254","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.093Z","timestamp":1790111878093,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Sep 2026 00:00:00 GMT","end":"Wed, 24 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:B0:9C:B6:4A:14:91:D9:75:2C:A1:3E:55:E1:05:D1:59:E6:3F:92","sha256":"99:3C:36:35:2E:AC:70:AC:80:4E:0C:90:AA:B7:FB:98:F0:0B:59:88:F2:9B:C2:19:5B:B0:2F:7F:F8:6E:E2:A2"}}},"request":{"raw":"GET /gewk-static/images/currency/echo-res/BTC.png?2.0.1790108358395 HTTP/1.1\r\nHost: yun-zc-api.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IqOzHrYaXbcl5BollxzfBfjlzkjOlSY383MgOZ5LFOHnzjP1oYSeztnUbjxZieJ4AoGOks/miAYRq7tGpzzANAwkCKGMT8B+\r\nx-amz-request-id: 8VMTFFX4MZWZNCTQ\r\nDate: Tue, 22 Sep 2026 21:18:00 GMT\r\nLast-Modified: Fri, 18 Sep 2026 11:24:16 GMT\r\nETag: \"8f8d12b8691a706a99e7544bd33527c2\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 2589\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2589,"size_decoded":3044,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8f8d12b8691a706a99e7544bd33527c2","sha1":"1ecd8325658f45911e28e94afb85f3aba3ea38c4","sha256":"8022fd53c251f18cb39cefede445f1c78a3b265989232f0bb46b9c4622e55a9e","sha512":"36abf50c637a730a26ceea1ab4e2c9d153274b5c1a03d273372f0b580eeed3267d08d4512326da520bd19b425288d72f0c2edc8abdbd3549b03612c639946021","ssdeep":"","tlshash":"a9513aa1c3955ea0445ad9910b83ea56263031dca284f7d6ee3024900f68b35b4d2b73","first_seen":"2023-04-13T08:11:26Z","last_seen":"2026-09-22T21:18:49.818546Z","times_seen":374,"resource_available":false,"data":null}},"time_used":1616,"timings":{"blocked":1276,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gewk.top/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:58.105Z","timestamp":1790111878105,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://gewk.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gewk.top\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":454,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-96378681.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.366Z","timestamp":1790111876366,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-96378681.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-36c6\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14022,"size_decoded":4244,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14021)","md5":"15de10a3728f3f2352399834cb115f83","sha1":"dc636b272552efbb6e5ccf3ea2d56ecd876db905","sha256":"f06fb2f5faeea24b7bf1d59d64f0a5337bbae10ea33ae91453814f1768f659e9","sha512":"3d2b7e658fc80fda00c2575a56831189abdde62b1a39b433527cb56ed3c00771f5b38d592bc01f045ca07a4b5a5aadca3241f754a588febe21d3b3f283804105","ssdeep":"384:u2NzqBT7hRf0xuF0FtAfU2w6KImMuEFuZ36kXMMzprhQhdCUSD:bNCsUKtAfUnwbAprhQhdCUA","tlshash":"6c52e865f902993ef6ffa05140980050766a7ffb411a89e1b9bc6d4b7343eb8f389708","first_seen":"2026-09-22T21:15:44.346292Z","last_seen":"2026-09-22T21:18:49.819562Z","times_seen":2,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/assets/index-d5b593db.js","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:56.375Z","timestamp":1790111876375,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /assets/index-d5b593db.js HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:56 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 22 Sep 2026 20:19:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2c6-1237\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4663,"size_decoded":2347,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4658)","md5":"9a4dfd0871a9969b3866c41b526b9857","sha1":"f78f98c8498a290c85dd62be7d164d100a7cd89f","sha256":"74c1d0a0e70b90dde5507e46d95afc797349612847f01d62eae614fb6c9c8687","sha512":"c08e5094eb11d4d8b588aeb8741eb792364150d3f8715449600f62460e71d3c7cef16564cbe5a5b0480dfd42a70e7119cceef3f5e38abb7b6760973db8b09f1b","ssdeep":"96:qAq+CY/9Y6qD+wSXNrFqPyAtb6airIP+jn3hv+e3XfWarejt:M+CYFY6qiwS9YqAtb3qZ3hv1Xu/t","tlshash":"a9a1c999f80286beb9671440489c0010319cbbffb10948f1fbfead0977b4979d364766","first_seen":"2026-09-22T21:15:44.350818Z","last_seen":"2026-09-22T21:18:49.820699Z","times_seen":2,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gewk.top/platform/dev/logo_144.png?2.0.1790108358395","fqdn":"gewk.top","domain":"gewk.top","tld":"top"},"ip":{"addr":"137.220.157.200","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gewk.top/","date":"2026-09-22T21:17:57.098Z","timestamp":1790111877098,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gewk.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 09:55:48 GMT","end":"Thu, 17 Dec 2026 09:55:47 GMT"},"fingerprint":{"sha1":"30:43:E8:D7:41:D1:B8:10:D5:45:2F:C2:C3:18:78:62:3D:83:40:0F","sha256":"AB:4A:A3:D0:E9:F8:AC:47:8B:D5:8A:E1:1E:29:F0:B8:4A:B8:11:0D:9A:7B:9A:71:F0:64:78:8F:2C:F6:87:66"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1790108358395 HTTP/1.1\r\nHost: gewk.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:17:57 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 22 Sep 2026 20:18:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab2e2b2-650f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25871,"size_decoded":12384,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"e3647298ed17654e424e41d27b08170b","sha1":"6428ddc3ed3b0587a6dd8ddfa614301663b7d2b4","sha256":"7aaf20df416596c067ae7587a4120fdc010725a0b889663837c529eca297f29a","sha512":"2784205d2974000f2fc547ccf440931b78a34cc04324d40b9600311f4a905039a7f67f7e90bc0effd961fc943e9d29628e0e8cfa678494c1a22f150bee8db193","ssdeep":"384:h6DbRkfbP3iHuGoEQSDVnm45Gk0U+Cc+VKtgcQcXL9:h6XHqEnDVnr5Gk5+Cxzc3XB","tlshash":"9ec2afa1fcd531942c01953225e3a41e48b2898bef43dd82bbdd40aaef12f559c9f58e","first_seen":"2025-09-12T08:50:03.430349Z","last_seen":"2026-09-22T21:18:49.797192Z","times_seen":14,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"gewk.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}