{"report_id":"fcfaf866-c655-47bc-bab1-68ea09e418a4","version":6,"status":"done","tags":[],"date":"2025-11-11T02:57:51Z","url":{"schema":"http","addr":"h5.gtbal.com/user/reg2/?inviteCode=G75WEB","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"h5.gtbal.com/user/reg2/G75WEB","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"title":"Register","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"d1effcd592ec1af066c9b8681d03906b","sha1":"cae369f7f2f5150faa8b25da6d9a0d0151ab2c09","sha256":"4fb45f6ec3678ef900b35105388436eca2da106c3c213a133c91fcfc3b2866d1","sha512":"2d2b73def8f7c88e847ac5c62f60f7cc9b1402686f11b1be85173d6ec3f7ca6952b5040838ac5a531288424eddab766a780e77e5c06e7039288f020ea8ffacdd","ssdeep":"","tlshash":"37e026ea6d65c8357ae0128a60f5f29c1b6061a0b721d68482d9dc3a9f20fd34c92d5c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.gtbal.com/user/reg2/?inviteCode=G75WEB","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-16T02:57:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.gtbal.com","ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-16","domain_rank":0,"first_seen":"2025-11-11T02:57:52.568664Z","last_seen":"2025-11-11T02:57:52.568664Z","alert_count":0,"request_count":4,"received_data":21823,"sent_data":2170,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h5.gtbal.com","ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-16","domain_rank":0,"first_seen":"2025-11-11T02:57:52.582627Z","last_seen":"2025-11-11T02:57:52.582627Z","alert_count":0,"request_count":32,"received_data":2425590,"sent_data":29421,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:8807","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/vant.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"474b9adec629aa5e9972019071077f25","sha1":"5319fa4c6e13fb9e15d3c55035e0b059c7df6368","sha256":"e2d394dfde1f25841916b66f993f2b30a88bbc7d91b2d385525cfaeee2955728","sha512":"069477fc4e9dc19221af94e754e757e43eb0092afd04def5bfe5fdfd1eda122b004db90db721e76f128c786ef768df5136873a7039316c3201435f47cbdab62a","ssdeep":"3072:EsK9XJF01uYvdJB052XS4r1sgewun7zyXvUnCCiD1jK5:EsQ0I/BFl7zyfef5","tlshash":"4ee30a8eb1c5b42517a3b0a4402f110aa1372988b40a85dcfab9f5d5ae7ca5d703ff7d","size":156724,"data":"","first_seen":"2025-11-11T02:57:57.14822Z","last_seen":"2025-11-11T02:57:57.14822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/axios.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07e915b7fdf3499d2e6fcf0b0921c072","sha1":"7cde3d9c18051af0eec38c6b2ca7e9d2c8dbd734","sha256":"1eaf77f9d4a6fe062f7f70e8b977852bfae653008c715bafc37d63ff5733d01b","sha512":"8028174daf7957b8229ed21670bb411af628e797625ba335e6db2c42c67e06790da32d2acde22970c0210bcbed4bfe663aec0c420e0d7752a7b69c3a40f5a75e","ssdeep":"384:ayRqdJbNZRGNogYfM08umUROTF3oZ94T9eOZD8UwuDgq1MjWLs+S:rwJ/hFMUmUyF3DT9eAQUND70L","tlshash":"9382e7cdb594f0675ba720f4845f690fb2fb5329b80c8894fb51e4e25c3a51d8b23e89","size":18696,"data":"","first_seen":"2025-10-06T10:49:45.620216Z","last_seen":"2026-05-17T10:18:08.071214Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e48834aac6b07dfa0d6fba4b4aa2414","sha1":"9eae4ce7b130ac39354caf7c7a55229d8cf8a3fb","sha256":"513050d86b0c385844d15cc20ce90fe41980876ac5c32cff77b45c8f8b993519","sha512":"8de854fef0d1268a5a7dd5b5cc8219bc78251f614f421771115af4ed436ef51ef72b044c6db8f1f9f42f14cf6285d5b97ed07361bd262b5f4ab18529ff56726a","ssdeep":"","tlshash":"c8d0a795396584317694014b50b6e3986b6121607721d181c1d9cc2b6a21dd304a1d6c","size":217,"data":"","first_seen":"2025-11-11T02:57:57.202992Z","last_seen":"2025-11-11T02:57:57.202992Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-5576a184.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b33798f6439d26ff3b543fa919b1b524","sha1":"e8df379bfd3dc145278b6642078e454e1989ca9f","sha256":"4cdd213e2c1169146fc2c8f0a41ac85fb16b15b3efbc603d99702fd5f539b746","sha512":"443d5276c615d321c04dc7385acdd995a607ecd718ac7ccd58db6aa688508025f150909143d5a7d6f163466f07378ed2087d28e7bc1f1d432d51c54361c2aeec","ssdeep":"96:NLv+b7J6CFEwB8M4reCH4D2mEqyJUzmgD921+TQeMsrcQACkkZjr+eK:NLmXJ0RFmEjZgD921yQPCk6dK","tlshash":"c8913b7a367b7b4d00f6c918ba0b1cb96d1d0d8f7c6ea8a4d07b3b99076870c506529f","size":4376,"data":"","first_seen":"2024-08-19T19:42:22.360928Z","last_seen":"2026-05-17T10:18:08.092067Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-3553ded0.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"044deb2a433b48fe70189402e453b69b","sha1":"80e20137bab0fd9bd6225b26b9e8bd4eeb865cb1","sha256":"42c05e2a0efab00da39c65fa78ad5be6073f874d358aa77c532aad249671c0d8","sha512":"cbec70c61f545c9af364227f0496f80d401de52a1f433929fa69d84d34ec66a1a87bc758ce8b6c6398892b385f46e7d0c3ae1ef401b1898f58f6c6334cd73d59","ssdeep":"","tlshash":"65316616b0dbe8798d768021100e136060551fdcf82c91e8bf34a5d05be8cac57ecb5c","size":1602,"data":"","first_seen":"2025-11-11T02:57:57.155296Z","last_seen":"2025-11-11T02:57:57.155296Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/user/reg2/?inviteCode=G75WEB","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88ecc363021a6939ee4b59c0ab5ffde1","sha1":"6778be58086859d5b86e51b9ca9cd22ede31d4f3","sha256":"ac1c43ff3881e8a130247519955018abed62fcdbbe9c1fd3a5d514b029f88bf9","sha512":"43570a7c0a3f85d1348f8521bef329e44ef7fd2591a219b6c85283ea1992b771677bbacf6a48ac64555e8f75f3129497543bc636ae4b13e5e8b31f92aa544bae","ssdeep":"","tlshash":"f8114cce4ada443900e3393d1f6eb644363318872404a9017e8d8f48ef58a691196e89","size":879,"data":"","first_seen":"2025-10-12T13:20:06.247307Z","last_seen":"2025-11-11T02:57:57.205162Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-0656f1b6.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db76ce757f7e5522271a9c06e528364e","sha1":"0ca195c283c278a726f5553d3a2727c3f2ea389b","sha256":"508542aa6b1eccb40c0f64ddd2ca2e546010716bef565ab5db829bf88d69f83d","sha512":"93f991c8ceed7c68ca3f754c8323f016f55f61d842070bc17b3fe325954d8cf952f786129baa4d15e06831f02f56598ca1529b69e1d08a316282fa21a86ffa6e","ssdeep":"","tlshash":"d851575e70cad46e8f278085603b3074a09e1fc49810ecd1ffb4ad6595e4e29072cbad","size":2710,"data":"","first_seen":"2025-11-11T02:57:57.182806Z","last_seen":"2025-11-11T02:57:57.182806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/user/reg2/?inviteCode=G75WEB","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc8ecf1f165af5219d94f3b2df916921","sha1":"cbdfce62aee103297dd7b1a1af6cb2113bc3e4fa","sha256":"06b5467f1cf45639700362ac8236515aaca9fab42da42fa5388c8876956a5e69","sha512":"c23e5affab84bece36ace349d2f90398e3fe0e1f302a99e73b75422e8190dd6e9df3c459390660c26c33d2e40cd578ea70f1fe98babca4b3ad1e4373024f28a8","ssdeep":"","tlshash":"c3119cb53b1a5534dac5418b317ee7a93e3260617a02d085c26cdc299958e8714efcbe","size":902,"data":"","first_seen":"2025-11-11T02:57:57.206659Z","last_seen":"2025-11-11T02:57:57.206659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/vue.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74fb5c497615f0afd0c6a92ee4544a16","sha1":"77f88cc6f60ec6a569c5a57a5fd44aa8ece23822","sha256":"db72dedbf5894fff72efea95aeafc5b501358e4b0b68672154586b8af237c37d","sha512":"86cb4aab39b0e158a57e56b7431435acd2ec1e7a37bd02a471710f5e25d2c3ee77f8294ae3f5b60b414fcee3166f54a98e8bde095b173b5a7b70385f11841287","ssdeep":"6144:R49E2UTqKnOGdGBzAmN+j+5TL5G2NqqHEyG0Ne4TL:R49E2Kxog6RL","tlshash":"fd5408cdb391b06143e721a6516f5006b3372819a80ec098b166e8db7dbd94c537bfbd","size":302036,"data":"","first_seen":"2025-11-11T02:57:57.195614Z","last_seen":"2025-11-11T02:57:57.195614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-2d208c2a.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f8e387cae1bbf096d1a51bf47631691","sha1":"d98c0fd9701c0acba7bd8c13ec0b2d1e204a8f7a","sha256":"1cb0cc2cb6b52e0f70ce47dea671f4457dc80b81568564c3a211f9abc7d1b68e","sha512":"b4e93c872d743b6ae83939a46230de47d2362d60641faf2e24925d18e241de99da7a56b224821d16c545ae86b2fdd1e857526ac83a367f81d3e16690649e5a67","ssdeep":"384:cK/Hm5BSTYE7IRI0V9LDIv/qb7nT2gkACnPUPqJFSmE5E1VX/7qJGf4N8O7VHqK3:jbhX0V9L3jf0bJoTJWMvKXCSC","tlshash":"7a03f6d8b283b069437364b500bf504bb23e7d60645e8842d517e5e97ca9e6f8237ebc","size":39180,"data":"","first_seen":"2025-11-11T02:57:57.193562Z","last_seen":"2025-11-11T02:57:57.193562Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-0488b776.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ebfa6db3279929a80e94eebbc26c29e","sha1":"e43537b4613464e890f39733bde1e9cbfa8b6d37","sha256":"9f5c8a5787cb2de475d66a0ebe2edb9ff909155fc12d5d41ee10ee15b2774087","sha512":"3776b43728fe85abfaacf6bc4667116fbe134110b80971c9b00c290b814c98e85d02eca455df1b50efb60b693cfc149ef8aa40fc76ab27fb22ca0ee27504ae99","ssdeep":"384:czYanqGGIVb74pgtP2qtPJWsk1CHy7wfc+dtz:cT5GIh7EgllPJWZ1HV+dZ","tlshash":"d572281df041a8674cb7a051361e0630a1b25a85b05209963e3cded1bffae5e172ef7d","size":17190,"data":"","first_seen":"2025-11-11T02:57:57.157354Z","last_seen":"2025-11-11T02:57:57.157354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/core-js.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d80d365a87472a0a3d56c758f68247b7","sha1":"8906724d9df17e40d41dc4ed17d2a49d4bebfb5f","sha256":"325d352725b971953d1ebfeb2b2162c3b1658b1bd9e42632b54a466035da3555","sha512":"dbeaebd64ecaef8a86f31259909342dae52076bb647e55ece5369bf5889b5c523ba43745abf89e349ac3bd18bbde02637dbb983e7be368fdaa88d3f84e741374","ssdeep":"384:L28gJI3G1PtXInAz4T5Zvm6zjs5edwsAapPzF7nmgDyF3S03fRQ/qzCyOSfM4r1b:LORIAstdm6wipJBYj+/oWSfhZRLbJ2Q","tlshash":"3113748db1d2b4d80fd274dc411fa80be0b75a6874ae94d1ffa6c4d46876c8fa136a1c","size":41518,"data":"","first_seen":"2025-11-11T02:57:57.164065Z","last_seen":"2025-11-11T02:57:57.164065Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/crypto-js.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e189d2ad56e26e5128e5495981fead1","sha1":"76b08ed7dde4917f6d60d650849d743cbab50888","sha256":"7259d673656900b17c7cf9557e482600d005c54bf94038e12bcb508150921ced","sha512":"7c155785651276ed6d9e22d6b99f95edbcf11d226de1a546d491b4ed31905e16de57d816eace7a3023eff491ca47923501de2bd48aea7e59ae863d041e167b6e","ssdeep":"1536:Rvn8xj93y/TajbTJUP9if8PtNPU9ArHMQV2QKxdj:Rvn0jTJtHTj","tlshash":"ef6339c47288a49593e739a4157f304b71773236170a9a98f2a0f5deacbc6da8077c3d","size":67703,"data":"","first_seen":"2025-10-06T10:49:45.59124Z","last_seen":"2026-05-17T10:18:08.074668Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/compressorjs.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63614274aa167a5903b4b10cb06fd5be","sha1":"57514ba465cf847d693c343284fa67371253d197","sha256":"53fa01cee0f063f1bd3d677fa2e72748400fe0fec23f08cdda87f0e3156e14cd","sha512":"63100dbb9522ccbc2ee78e852ca7710bfbc20ec6bcd3d313ab12eabd12f783b13605fe6d27bc0b09b374984fc0502ce57fa9f6dfd4a7f39329f60558b3523234","ssdeep":"192:7lnZyhWCYJImlKCe5A+fFOuc1W0DEboqTdXo375oX+e:p7JxliAjN1tioH37m","tlshash":"44320be83241b09250b261f6806f420f7135af241b9ac1a0a336d7d5ad788dbb7b7f65","size":11101,"data":"","first_seen":"2025-10-06T10:49:45.640971Z","last_seen":"2026-05-17T10:18:08.061328Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/vendors~app.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7835b495e70c061a083ae3bea5d900ed","sha1":"721df9a557ef7b26f2e62bd4c33225df66551710","sha256":"e87456a3a5343cf3440faa0acd40ab9339275b571c5d52ebdcd616427d910911","sha512":"d0cc21de6ef677605c05d3db32e64aa3b64c8bd7284e5853716c9f6425479f18ce5c0dbad6f904706bc15a8dd9a10e52f91b1dee794c1d166568f8b8ce394665","ssdeep":"6144:VagnFdjRzS2xmGbpJGDokQf/WDb9hZ/05P0:VNFdjUZ9f/05c","tlshash":"087419997254343806d54069806f194bf7362a2e245ac45cb368f4efacbcd8e31bfb79","size":352447,"data":"","first_seen":"2025-11-11T02:57:57.199384Z","last_seen":"2025-11-11T02:57:57.199384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/app.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7dd27d20dde206d3ee610908aa42ca7","sha1":"610a5b67669036bea1130a4c3ace77441ab343ce","sha256":"4c21bf649e9670ff0486f183dc22fe3a992f1c1b29ce870147426027e3c4e7dc","sha512":"1141691cf1e93a42b80776b167e4ab6a335bb72d9267d235179801dedd9b0153b48868e60a3cf5b06cea186486afa7b414beb1c8e421a105b6d6535bdf9b1577","ssdeep":"24576:eC1rpWBe+WLzrXup0M+fLyYhckmKhvhf7fsLdNK:P1rpWBe7EBY+kmKhvhf7fsm","tlshash":"b7258e6416c6257a2bd283d1f543fe5deaef04b9b5c4c272c4dd071bb0e992da2ae034","size":1023781,"data":"","first_seen":"2025-11-11T02:57:57.161568Z","last_seen":"2025-11-11T02:57:57.161568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e8d98e31767cc08e383e28d2b7c9502","sha1":"6b045a771f9b9b84845c39634205893aba9a2ad3","sha256":"7fe0c8a6aea8d26ef9c5488ed55b6690374c71a2e6311e49533a1f5de14acdf9","sha512":"e09c85afa6e26fdc1b9c75be020db0841f8cfbd5364e7937ee1f3d002eeaeb986e89f6b432600bf6a375d5d448467826064929bbd9a802c1ad15cd1090ea1e50","ssdeep":"192:llCeehDQkEK/388+QhXg9uR4zj2KQyhRByk5BK/HVvOX7JBwL:llrQs85MuR4zj2WXn8Vvw7JE","tlshash":"1522e8ca2d85e11592e158be013738db32da9f52f4c54b4c9023def0be1136c77a9d8a","size":10076,"data":"","first_seen":"2025-11-11T02:57:57.191425Z","last_seen":"2025-11-11T03:44:58.242483Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-2b5946a0.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d2d3814bc771d1ebeb261cd63606dc4","sha1":"089c1078c461e5abe55a30a55af58bf13b0a0514","sha256":"ee05a4b692d32d13718a6e2c30ec8035651a7a149309de70f5f7a96166575580","sha512":"97eec30193f66ab70e21d3b4ce1736a90a79f49faa93ed381a41eddfc4f11bc3f9b60259663775e5814b053ff292d6a08447d38e2d7293641794dc061dc152d8","ssdeep":"","tlshash":"bc316674bbc6f052c737c946f10b2f505035b48ca8011493f7bcaaa9268e7a6b34a3d5","size":1606,"data":"","first_seen":"2025-11-11T02:57:57.150609Z","last_seen":"2025-11-11T02:57:57.150609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/user/reg2/?inviteCode=G75WEB","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd290fda67e6163af81fab99bb47c09e","sha1":"9da2b5f58edf91e592e659e844ee5e9b66f6923a","sha256":"af0217d6ea3ff334def89c74e95f6a0d0604ad031b5143d5666d33213bf556dc","sha512":"af19d0d9bd1afb1bc1c441a292db4889f9ed02eb15720a14e3c2b69b2315b4db7468381d7a873d181cfacd23e7d239c2dc8921e19173c8506bf83f216cc3bbc6","ssdeep":"","tlshash":"def0e2d3f3ac95f190beb26deb2fa7c8653e44f6b404295a9c0dae506424a3d0750c4e","size":509,"data":"","first_seen":"2025-11-11T02:57:57.208848Z","last_seen":"2025-11-11T02:57:57.208848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5.gtbal.com/static/css/chunk-3553ded0.085a9ad2.css","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/css/chunk-3553ded0.085a9ad2.css HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-5a1\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=.ybigxmXMJO6G2NXufnJUKIsrDCb4RsJtiS6Wn74G9k-1762829849.1340587-1.0.1.1-sHiySP_a4DbJbOu4uxxB7s2ZfhQM0RsorcLBNrpme4gCiZvfYap5WaZ46yUYf47rpGcowEgAYhEedempI1fLdVX0_svvLW.nHmCHcmJleUaa2lAzryEj3y8w_rqZKT18; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bd1bcb32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1441), with no line terminators","md5":"378ab84bf3ff5f990b7a4d7c01e74ab8","sha1":"47b92da9200cf384f41f9ad364d3ba251db292f3","sha256":"b871c67d8c37dfc54e8b731b51467fd68e1714d6f91e83bcfa051fea17650e1d","sha512":"0add0ff8575a9877c4ba2ff2764b7b6cb3e373d7eb6f9587731074e95e1e7d93754234268d756afe28013b3dacfaa1cb76331abedf47ace6d9507f5b4b89f53b","ssdeep":"","tlshash":"cd21ac35a15cbd78e93be3943fd0268940509ad1c942179096035a2848c76f227e0bed","first_seen":"2025-11-11T02:57:57.133015Z","last_seen":"2025-11-11T02:57:57.133015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gtbal.com/api/country/list","fqdn":"api.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"OPTIONS /api/country/list HTTP/1.1\r\nHost: api.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,device-id,lang,system\r\nReferer: https://h5.gtbal.com/\r\nOrigin: https://h5.gtbal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, device-id, lang, system\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=UH2XUOv8S56ma8zUiNPj4iLm8I1sZMKncZDfIYzQB9E-1762829849.6457105-1.0.1.1-q020a5zvgn1Hp.cqVhxvhlLAjBeNA4l0ekfa3MauetAMu3C6uaf9WfKfAwOuHnhy8Z2oKN8WYz_CepfjoTS05q8m7O00lxkXiViRCBfWE_G5hYh57gER193dKyI7A9zD; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:30 GMT\n_cfuvid=8EAbseiWs_ljuJ8C9TVcUnECiyVOYG5knFmELPPzdSU-1762829849.6457105-1.0.1.1-jo4HwkcieqnE3SjKaINpySf1TCenkdS32FU9rEcImRg; HttpOnly; SameSite=None; Secure; Path=/; Domain=api.gtbal.com\r\ncf-ray: 99ca85c049df4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":105,"dns":88,"connect":3,"send":0,"wait":385,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/css/chunk-0656f1b6.bfb8d591.css","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/css/chunk-0656f1b6.bfb8d591.css HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=hvBEGo7u8kqCdPhJA7KQT2b_9GfsLt3Ri3NByicm6yE-1762829849.5238812-1.0.1.1-NRHyOUGgkAzSuEj.emiJxpCPneJaFA9XTmT4z9KpzA8KPiPP_pyuSlV6a8Nen50LJcl1zehx8eg_p612h3xwFi.T8IqnpYLc_rd3m1e_uSVly9n3cIORGltafOjeDbaY; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-527\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=8BbmqfkRiqdV90LlLp1Mye6g_4g54hPKAIgrWzODLMI-1762829849.5914514-1.0.1.1-5XvHeXGogNvKIY8E3WSAfGPAF8TxwdzRQWx50uahk88mf_MA6CVWGPC6Y7ZEFpo9dz.E2zzgvqqImYIkMhiHaE1XROYXuptS8BOd27h2q_cjH2ipK1rpYqBUXT9FVnf.; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bffde732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1319,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1319), with no line terminators","md5":"9f5055923acfdb73a8f453dfe0dd5916","sha1":"2a2faac6f664d2e8bb2805a4095551fab040a312","sha256":"c608aa28dd3d88d4435d75153438753efaadf899ffa0472721d01b4b2a45eaa0","sha512":"943094e0f198034bd98f9225fc29cf795f081444b458dbac9234bce2a7486799ea90ae568da08f4d87d6df80aed302b4e90276f6869b6d117e69d5b01be6e6e1","ssdeep":"","tlshash":"64217c8fe52f5088cc33d1955bb08648d18c7a0b878211e2aa3b592f4ce77732753e71","first_seen":"2025-11-11T02:57:57.137547Z","last_seen":"2025-11-11T02:57:57.137547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/img/bg.5d868d07.jpg","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/img/bg.5d868d07.jpg HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=hvBEGo7u8kqCdPhJA7KQT2b_9GfsLt3Ri3NByicm6yE-1762829849.5238812-1.0.1.1-NRHyOUGgkAzSuEj.emiJxpCPneJaFA9XTmT4z9KpzA8KPiPP_pyuSlV6a8Nen50LJcl1zehx8eg_p612h3xwFi.T8IqnpYLc_rd3m1e_uSVly9n3cIORGltafOjeDbaY; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 158440\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-bgj: h2pri\r\naccept-ranges: bytes\r\netag: \"690dbe32-26ae8\"\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\ncf-cache-status: REVALIDATED\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=7fCh8KYXDkK0ic_kg7m4sxTW1BwEqlDHxmeNt.ennSU-1762829849.5968397-1.0.1.1-mJ.Oxv7p8TT86rFCeLCpomBkrxNqrXnO0o5A.vARuTSMC25ctSAaYsIUL53f5cIRYJR8mZWcG0Ss_qI6dCQT3eEp0vUsEIlij8hGhey0hfr5Zp3oNxCdznxx.CtkCRbp; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:30 GMT\r\ncf-ray: 99ca85bffdf032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":158440,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 750x1624, components 3","md5":"5d868d07c5454342a0c771d5a1c752a8","sha1":"9be2a07924ef87d6e2934f2ea7edc3342b926224","sha256":"087651b0f3a4ddc40537600a51422ce58f9662fea7e517f58245a0084266e273","sha512":"0d08cb30fd0e0d8f1d2bb46df3c11ff0e368599416b0befefe2a60332a0f74034844f6dfad2b3df253933f835bbbaceb0dc9993fc3bd2fe384415cd63ee34b43","ssdeep":"3072:yyOqFNhLLkEEFB//LFnkbGh2ZSOthL6hED4/D2dtIzu0:ychyFxFQGEZSOvD1IV","tlshash":"dcf3f0b4fbc7cb522b57167ea87e7c77072499c618c1699708030e35d218fb2a993a7c","first_seen":"2025-11-11T02:57:57.140224Z","last_seen":"2025-11-11T02:57:57.140224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/img/eye_off.89052112.svg","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/img/eye_off.89052112.svg HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=hvBEGo7u8kqCdPhJA7KQT2b_9GfsLt3Ri3NByicm6yE-1762829849.5238812-1.0.1.1-NRHyOUGgkAzSuEj.emiJxpCPneJaFA9XTmT4z9KpzA8KPiPP_pyuSlV6a8Nen50LJcl1zehx8eg_p612h3xwFi.T8IqnpYLc_rd3m1e_uSVly9n3cIORGltafOjeDbaY; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:30 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-500\"\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nexpires: Tue, 11 Nov 2025 06:57:30 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=uPnxq7_7iCelvF9aTPkdkArcPxV6XF98NJxsw8PEG5M-1762829849.604343-1.0.1.1-X_JEW8_P4fopBF2hjQgS1MNVPU41f.WM2q_8k.2HW6LxiKX3i1W7JdBDsagT.2d9MBEtBmKrZmJfIRgI0B5ik0EBSwNwZrGgOZq4g8vnIeVNkkH30Kqu8Nvi7SqkG2Z6; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:30 GMT\r\ncf-ray: 99ca85c00df732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"890521124f29596fa868ea80d50b7e8b","sha1":"427418aed57bac8a314e984571ca1c6bce98ac06","sha256":"cd0246c0ce568e5d34a1c97dc41537c1ebc06ab4ffcd8f338b7f3ec4481881e7","sha512":"bb6120e7b00b7891e4feb95a94b8ff4de1ca47d9e417553b1415e99ce5f3013452d5d5fe97978519995399f568d39c715a538c81e1ed99ca40f6949c7245135d","ssdeep":"","tlshash":"49212dfdb068a2f564019384da379da2f0ad34bf9b46d1ecc2d4d990e740119c68e804","first_seen":"2025-11-11T02:57:57.14338Z","last_seen":"2025-11-11T02:57:57.14338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/img/icoDownApp.3ef92e1c.svg","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/img/icoDownApp.3ef92e1c.svg HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=hvBEGo7u8kqCdPhJA7KQT2b_9GfsLt3Ri3NByicm6yE-1762829849.5238812-1.0.1.1-NRHyOUGgkAzSuEj.emiJxpCPneJaFA9XTmT4z9KpzA8KPiPP_pyuSlV6a8Nen50LJcl1zehx8eg_p612h3xwFi.T8IqnpYLc_rd3m1e_uSVly9n3cIORGltafOjeDbaY; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:30 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-6bd\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:30 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=RwRSIysn4_xhq49hownl_ZyI9f.ZwCjlfGQO2Ba4jr8-1762829849.6210666-1.0.1.1-_RtRu4AwtsAie0ZrUh4UsZQHh8b3E3DXwoHEcfYfEblc7XuMoKDOrfSdjiTBgmFGVL_YCdVVBlyzgZxoTud3DjSh3Usfeq6RPVax4I2Zj0sxRSG0ML1usqlQU1blan.A; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:30 GMT\r\ncf-ray: 99ca85c02e0f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1725,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ef92e1c0198beba462ca4567812d528","sha1":"dbd1d47f1039e8910afbc110128bb1a970b4dd80","sha256":"0985e89ea1ffd5c6088b2a789d5f234fb6869c4458b8c1974513698ad3816d68","sha512":"a4677b41f7d5b71cff4341b270b2415db4b1f8e1fd0b64d3e586660e336679f1fe9a01a2eee22a1e04197084663e8dbba33958a7b4580fe74eb36c58ad81e40b","ssdeep":"","tlshash":"b7317bbfabe8d9d08e0257e2d9f43240f227245dd327ce4461b06b68f6a4ce54e54ca8","first_seen":"2025-11-11T02:57:57.145947Z","last_seen":"2025-11-11T02:57:57.145947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/vant.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/vant.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-26434\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=VrsaZ9heK8MFM0K0FSQ5DtnleBRMoboUW6AfmYp95t8-1762829848.7482817-1.0.1.1-1gtaKpIASMKPzTP7Fwe72sp.hR2bvKoWNVlYQxc9E0McW82lzb5cZQLIMPLkr.pXjkjZ0gvueyNs5VDt7wwIW9EOZfm8u.OrXuF9hSzIuavSQ3Sz1YXan89hnlfCbw3C; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85baa9cd32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":156724,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65072), with no line terminators","md5":"474b9adec629aa5e9972019071077f25","sha1":"5319fa4c6e13fb9e15d3c55035e0b059c7df6368","sha256":"e2d394dfde1f25841916b66f993f2b30a88bbc7d91b2d385525cfaeee2955728","sha512":"069477fc4e9dc19221af94e754e757e43eb0092afd04def5bfe5fdfd1eda122b004db90db721e76f128c786ef768df5136873a7039316c3201435f47cbdab62a","ssdeep":"3072:EsK9XJF01uYvdJB052XS4r1sgewun7zyXvUnCCiD1jK5:EsQ0I/BFl7zyfef5","tlshash":"4ee30a8eb1c5b42517a3b0a4402f110aa1372988b40a85dcfab9f5d5ae7ca5d703ff7d","first_seen":"2025-11-11T02:57:57.14822Z","last_seen":"2025-11-11T02:57:57.14822Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-2b5946a0.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/chunk-2b5946a0.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=RTccq0zgzwRz41uzG48BoY828TuWKxO0UQvi2E6QCdE-1762829849.1079233-1.0.1.1-SnHdcU5pd731eOcHVWxqftO5I4ySd6ozTknXJNx1Y7Sc87orXO7h7QrCR5dZi44BpdWRh1NTqLwU_5dJ0JpOSKDUezdP87Mgv9V7C_5okoQNOfIy7QnVFAo09ANfrKXE; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-646\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=hvBEGo7u8kqCdPhJA7KQT2b_9GfsLt3Ri3NByicm6yE-1762829849.5238812-1.0.1.1-NRHyOUGgkAzSuEj.emiJxpCPneJaFA9XTmT4z9KpzA8KPiPP_pyuSlV6a8Nen50LJcl1zehx8eg_p612h3xwFi.T8IqnpYLc_rd3m1e_uSVly9n3cIORGltafOjeDbaY; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bf8d8332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1606,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1606), with no line terminators","md5":"2d2d3814bc771d1ebeb261cd63606dc4","sha1":"089c1078c461e5abe55a30a55af58bf13b0a0514","sha256":"ee05a4b692d32d13718a6e2c30ec8035651a7a149309de70f5f7a96166575580","sha512":"97eec30193f66ab70e21d3b4ce1736a90a79f49faa93ed381a41eddfc4f11bc3f9b60259663775e5814b053ff292d6a08447d38e2d7293641794dc061dc152d8","ssdeep":"","tlshash":"bc316674bbc6f052c737c946f10b2f505035b48ca8011493f7bcaaa9268e7a6b34a3d5","first_seen":"2025-11-11T02:57:57.150609Z","last_seen":"2025-11-11T02:57:57.150609Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gtbal.com/api/captcha/get","fqdn":"api.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"OPTIONS /api/captcha/get HTTP/1.1\r\nHost: api.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,device-id,lang,system\r\nReferer: https://h5.gtbal.com/\r\nOrigin: https://h5.gtbal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, device-id, lang, system\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=vBnAeQiRUcOExbrJ5cne4F.9c1LqXnfJvGzz8aQiu9E-1762829849.645201-1.0.1.1-oys.oYZZ7qea3l43FRGIW7sR5ayxQXSoJK04wLnGBjKCwIZ1OQY9E3Tn6RM2Unjr1NvdUn9NZ55OzF0Bu1nvMwxK4ObkICHbBg9MPAODd_lkwFGmiSDnaMbXKHHut9Jo; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:30 GMT\n_cfuvid=RTS3d6GbGGkzP66DwJzWLMeZ8d3.vn6aXfN.mZBe_hk-1762829849.645201-1.0.1.1-m5psjUTAEGOt6Fm_hVjS.9THBSFkj5ZiuWzWmVAQDIA; HttpOnly; SameSite=None; Secure; Path=/; Domain=api.gtbal.com\r\ncf-ray: 99ca85c049de4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":106,"dns":90,"connect":1,"send":0,"wait":384,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-5576a184.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/chunk-5576a184.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-1118\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=gKMHNxYJgaa6WUJua19TXR1pYNTn.od0Uk8WWBZW_9o-1762829849.1283815-1.0.1.1-RpFg3GPtcUshQlWFFrL7BGQ3k1aZFYcmRqUznLZKe0SPbq59rnDj_AJwa3HU54ibXnagbMfYjqu7T9CNbrhs.DXUWLDZDUTQhP7q_i_2_FOUWEJ2TIERraFblTvB3iEM; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bd0bc432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4376,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4376), with no line terminators","md5":"b33798f6439d26ff3b543fa919b1b524","sha1":"e8df379bfd3dc145278b6642078e454e1989ca9f","sha256":"4cdd213e2c1169146fc2c8f0a41ac85fb16b15b3efbc603d99702fd5f539b746","sha512":"443d5276c615d321c04dc7385acdd995a607ecd718ac7ccd58db6aa688508025f150909143d5a7d6f163466f07378ed2087d28e7bc1f1d432d51c54361c2aeec","ssdeep":"96:NLv+b7J6CFEwB8M4reCH4D2mEqyJUzmgD921+TQeMsrcQACkkZjr+eK:NLmXJ0RFmEjZgD921yQPCk6dK","tlshash":"c8913b7a367b7b4d00f6c918ba0b1cb96d1d0d8f7c6ea8a4d07b3b99076870c506529f","first_seen":"2024-08-19T19:42:22.360928Z","last_seen":"2026-05-17T10:18:08.092067Z","times_seen":12,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-3553ded0.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/chunk-3553ded0.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-642\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=0iIZCLyK9dIgMwLjHoyZkcXZRTVz2SoiLasR1U958IY-1762829849.1345937-1.0.1.1-86fV1CwpZESlPKkDkuHiJ.tlFBlnsrq9gQ2xtKHemnfCIWrdE2VxviKxyCei4tGqyqTETQjhTmCOQ5YoXxGuK4T5OUypN7UewWkEqGIQklul2orMb_d6c7bzVP4tR0ne; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bd1bcc32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1602), with no line terminators","md5":"044deb2a433b48fe70189402e453b69b","sha1":"80e20137bab0fd9bd6225b26b9e8bd4eeb865cb1","sha256":"42c05e2a0efab00da39c65fa78ad5be6073f874d358aa77c532aad249671c0d8","sha512":"cbec70c61f545c9af364227f0496f80d401de52a1f433929fa69d84d34ec66a1a87bc758ce8b6c6398892b385f46e7d0c3ae1ef401b1898f58f6c6334cd73d59","ssdeep":"","tlshash":"65316616b0dbe8798d768021100e136060551fdcf82c91e8bf34a5d05be8cac57ecb5c","first_seen":"2025-11-11T02:57:57.155296Z","last_seen":"2025-11-11T02:57:57.155296Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-0488b776.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/chunk-0488b776.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-4326\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=A3H7c_PiS8lKf_vVpPkhL9Mn7nU3w4dKmuZBDCJAXdk-1762829849.1082902-1.0.1.1-FgIOwdYYYK2TTlAdtKBYXkldEAhX7i7WvWJkBWveJtDztkpErEWFZ59Pblfb4RxCDUeLKo5iZj6DFfojhDyxly25W97.joXjOQ1Nm5aW7CvcGuaQaavRcAJjNdp3FVj.; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bcebab32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17186), with no line terminators","md5":"4ebfa6db3279929a80e94eebbc26c29e","sha1":"e43537b4613464e890f39733bde1e9cbfa8b6d37","sha256":"9f5c8a5787cb2de475d66a0ebe2edb9ff909155fc12d5d41ee10ee15b2774087","sha512":"3776b43728fe85abfaacf6bc4667116fbe134110b80971c9b00c290b814c98e85d02eca455df1b50efb60b693cfc149ef8aa40fc76ab27fb22ca0ee27504ae99","ssdeep":"384:czYanqGGIVb74pgtP2qtPJWsk1CHy7wfc+dtz:cT5GIh7EgllPJWZ1HV+dZ","tlshash":"d572281df041a8674cb7a051361e0630a1b25a85b05209963e3cded1bffae5e172ef7d","first_seen":"2025-11-11T02:57:57.157354Z","last_seen":"2025-11-11T02:57:57.157354Z","times_seen":1,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/user/reg2/?inviteCode=G75WEB","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T02:57:28.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /user/reg2/?inviteCode=G75WEB HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\nset-cookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\n_cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; HttpOnly; SameSite=None; Secure; Path=/; Domain=h5.gtbal.com\r\ncf-ray: 99ca85b6fe7832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js:8807","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5615,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2827)","md5":"00260c5e3ba18df7b7d8502fff92814d","sha1":"ac84cea8165a1d309a7be651f01833f2687563c4","sha256":"62ac053112e81e27d1d18467efcfcd7c0887cf009b19d9d2d31ddb300e005761","sha512":"7ec3636abb7ce856e125afa65b45f615c9798b37dd0e747f710897a82063f4da6f90fd6bc6e02762b39fef2dd137cb10ecedc88a1e2bd4ea0dd33e59ece4baaf","ssdeep":"96:Pobm222a+0Nbc+K/nRnaRn5pAXNx3L5w0nx/IJIBGLXi:PK22a+0Nbc+CnRnaRngXNx3Lhnx/NG2","tlshash":"23c10eb26f5b842ca8f5605c5ebffe555039ad07d947848db8eca9888f30bd40682c47","first_seen":"2025-11-11T02:57:57.159567Z","last_seen":"2025-11-11T02:57:57.159567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":85,"dns":71,"connect":1,"send":0,"wait":445,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/app.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/app.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-f9f25\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=ECupKzThCKzYwUApcQ_wnEvxJgrO1Q7DKfAzch6rFAo-1762829848.745728-1.0.1.1-K0FtyE47qzMqx5oKfqySS6UQFfKV49FQlgO.EgQgtaZvOTShbu925tjpCI5eRFGVnJ0iBmcikO0NsNcPoBj1CjbLudxwQmDilYpyqPUXZtHPiXGcpT6GifOTfX.m4szV; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85baa9c132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1023781,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64093), with no line terminators","md5":"d7dd27d20dde206d3ee610908aa42ca7","sha1":"610a5b67669036bea1130a4c3ace77441ab343ce","sha256":"4c21bf649e9670ff0486f183dc22fe3a992f1c1b29ce870147426027e3c4e7dc","sha512":"1141691cf1e93a42b80776b167e4ab6a335bb72d9267d235179801dedd9b0153b48868e60a3cf5b06cea186486afa7b414beb1c8e421a105b6d6535bdf9b1577","ssdeep":"24576:eC1rpWBe+WLzrXup0M+fLyYhckmKhvhf7fsLdNK:P1rpWBe7EBY+kmKhvhf7fsm","tlshash":"b7258e6416c6257a2bd283d1f543fe5deaef04b9b5c4c272c4dd071bb0e992da2ae034","first_seen":"2025-11-11T02:57:57.161568Z","last_seen":"2025-11-11T02:57:57.161568Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/core-js.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/core-js.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-a22e\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=MUtTVSJsbN3YqOZraJyKiSJUqKMpLKK3bAUPaVUXgdc-1762829848.7472348-1.0.1.1-iFoXRuyKZMIbjHpxYLCKhmMcln2fTkN7p2VyKGIAvcClOFhuow5jk1jm6oLxchZZcwk.88_1QpcF0h3VjODo8dYlMwAUNafqUoKtdYcqBSznRWp65LhoKAjk1rYz4EBo; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85baa9c932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":41518,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41517), with no line terminators","md5":"d80d365a87472a0a3d56c758f68247b7","sha1":"8906724d9df17e40d41dc4ed17d2a49d4bebfb5f","sha256":"325d352725b971953d1ebfeb2b2162c3b1658b1bd9e42632b54a466035da3555","sha512":"dbeaebd64ecaef8a86f31259909342dae52076bb647e55ece5369bf5889b5c523ba43745abf89e349ac3bd18bbde02637dbb983e7be368fdaa88d3f84e741374","ssdeep":"384:L28gJI3G1PtXInAz4T5Zvm6zjs5edwsAapPzF7nmgDyF3S03fRQ/qzCyOSfM4r1b:LORIAstdm6wipJBYj+/oWSfhZRLbJ2Q","tlshash":"3113748db1d2b4d80fd274dc411fa80be0b75a6874ae94d1ffa6c4d46876c8fa136a1c","first_seen":"2025-11-11T02:57:57.164065Z","last_seen":"2025-11-11T02:57:57.164065Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/crypto-js.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/crypto-js.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-10878\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=1MnrK1jpTX2gkXL0t26CeSQ8te06dqa9n.tnwHNfSa4-1762829848.7480488-1.0.1.1-wBCyfI1W6GrrXO4LTbx7tG1KGtlHPvMthlEjWlY3rxvRZYtwt1zuauNSD1849KIBTTZlwrfqYSJZNEykZknRMHXPjcnD8GLPS9MZlic_NV6ewm72BQ2ezB6XB.ckLeRa; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85baa9cb32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":67704,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38620)","md5":"6e189d2ad56e26e5128e5495981fead1","sha1":"76b08ed7dde4917f6d60d650849d743cbab50888","sha256":"7259d673656900b17c7cf9557e482600d005c54bf94038e12bcb508150921ced","sha512":"7c155785651276ed6d9e22d6b99f95edbcf11d226de1a546d491b4ed31905e16de57d816eace7a3023eff491ca47923501de2bd48aea7e59ae863d041e167b6e","ssdeep":"1536:Rvn8xj93y/TajbTJUP9if8PtNPU9ArHMQV2QKxdj:Rvn0jTJtHTj","tlshash":"ef6339c47288a49593e739a4157f304b71773236170a9a98f2a0f5deacbc6da8077c3d","first_seen":"2025-10-06T10:49:45.59124Z","last_seen":"2026-05-17T10:18:08.074668Z","times_seen":10,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/css/vant.d14f5539.css","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/css/vant.d14f5539.css HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-24d13\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=TE_lr9W6O.UnKECi4VSe9ZAOIKkPhqhLnq231qqRFgA-1762829848.7509856-1.0.1.1-J9IthlhinsuG2hr1tklqZns01AW0VET6hHZLSY57CO5JX_x6Ls8nrKspRonk9bKkH_un.PgycKurSsiKiNS3b.NOqliWew3gRON9RV7udtIAtUwQMb4ysg3hlQuRFI4X; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85bab9d632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150803,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1d15a8cb9e30e4035c8d240f016f08a6","sha1":"f3b12ddaaa0b2fd49254de405f168cb042750bff","sha256":"b60a6d061cdffa65854028cd41141e6488900d99fb9c71562fe55760df29c0b3","sha512":"b6e54272a806829f7d7098964acabbd559be99523a68013ebd98e08380347c55bbdac461e426b986de056d66d3e3f6e38c8fe7b290cfacd46a56f69e7b0f31ce","ssdeep":"1536:PHQbFNJ+jqkiHcurx3WqyrtpqoSWEDZ4ef21P55RDdVo3MXV:P4rxmNH9yDhfAR5Jc3MXV","tlshash":"10e3c62b9ac0139cb217cd605fc4a7d8c228d171e5011bf9f117b62dcfcbb9605a6b5a","first_seen":"2024-07-02T16:13:08Z","last_seen":"2026-05-17T10:18:08.076457Z","times_seen":25,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/css/chunk-0488b776.14483019.css","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/css/chunk-0488b776.14483019.css HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-903\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=RTccq0zgzwRz41uzG48BoY828TuWKxO0UQvi2E6QCdE-1762829849.1079233-1.0.1.1-SnHdcU5pd731eOcHVWxqftO5I4ySd6ozTknXJNx1Y7Sc87orXO7h7QrCR5dZi44BpdWRh1NTqLwU_5dJ0JpOSKDUezdP87Mgv9V7C_5okoQNOfIy7QnVFAo09ANfrKXE; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bcebaa32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2307), with no line terminators","md5":"50a4f6949bab83709c91f20de2720506","sha1":"30b946eb3dfe83cef97fad31f0053679d4de33c3","sha256":"03d4ff571c4fa444ffa707095b9f4ed86958e4251fba2b7b0c71e8c4fae5b092","sha512":"f18a0f8be88ae360a8f7438aaef0c2da7e24520a7c0e86240ed9926f7fa787f113d1f243063f0057a8bc28fdd66259f2ccb732af028b5a5d948131bac6bee082","ssdeep":"","tlshash":"21419a9477185935bcb3d1a92ed0468773007b52c2c26f01eb0bbd299d8b7b3a370d66","first_seen":"2025-11-11T02:57:57.170734Z","last_seen":"2025-11-11T02:57:57.170734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/css/chunk-5576a184.9f52f39a.css","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/css/chunk-5576a184.9f52f39a.css HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-33e\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=KgaBNGgOgr6Uzx5xCiCMqJc73NEfQ6ugCuUWLfXVnN8-1762829849.128022-1.0.1.1-pQPM4y5FCcCDKViNk2i_1TxgJJJh_4ZCNJvyl445jlxF6MI4OZFS66kfEEKATBEWCNn4IPsLgXUW8bTzSkX6tK3SQK90wONpH8iMYunKMWfPmS69XKglgll.4FrujnHc; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bd0bc332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (830), with no line terminators","md5":"b8787fb5f9d9b6304190b6fdd0551d95","sha1":"0ec89ebe7bb5f2e29cb697e3e63b98b1c310de4b","sha256":"f3355a282946a5b95fc02d15a803d2517f1a7b96ac3d559b50682e1011b1cc4d","sha512":"0e4cfd7253c4caa7466a4f22f6cb7d43f4472f2deeb259808d1557a89499629c2cefa33455ae367e9618db46e86e81af20f19b289b87966677d90193c8f5c1c5","ssdeep":"","tlshash":"3c016b346538406cc02bd37fd4ce2b58017cb74ba5fd156c231f2b2156a6698287417d","first_seen":"2023-10-31T05:48:21Z","last_seen":"2026-05-17T10:18:08.097602Z","times_seen":27,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/compressorjs.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/compressorjs.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-2b5d\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=BwmE0.ANGwXKlhQHcEvFefjLgo_uFPIHk35GCjhIZDs-1762829848.7466164-1.0.1.1-pnCG.5itD55d8mFjOhXNUKoAxRHkxHCfNcBvZPCaMut_jkdUkH86JBPgYQRbAryncr8U9zxnHEIKSZy6kCdfeckHzZxY59U_OqdlCHf_yTwED4hdpvEQ38JJBtjoi.9K; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85baa9c632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11101,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10808)","md5":"63614274aa167a5903b4b10cb06fd5be","sha1":"57514ba465cf847d693c343284fa67371253d197","sha256":"53fa01cee0f063f1bd3d677fa2e72748400fe0fec23f08cdda87f0e3156e14cd","sha512":"63100dbb9522ccbc2ee78e852ca7710bfbc20ec6bcd3d313ab12eabd12f783b13605fe6d27bc0b09b374984fc0502ce57fa9f6dfd4a7f39329f60558b3523234","ssdeep":"192:7lnZyhWCYJImlKCe5A+fFOuc1W0DEboqTdXo375oX+e:p7JxliAjN1tioH37m","tlshash":"44320be83241b09250b261f6806f420f7135af241b9ac1a0a336d7d5ad788dbb7b7f65","first_seen":"2025-10-06T10:49:45.640971Z","last_seen":"2026-05-17T10:18:08.061328Z","times_seen":10,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/css/app.20a155bd.css","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/css/app.20a155bd.css HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-2e84\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=86aPOQXbdxKfQ8BvlTF9EizYrRX__OULeNpQzuNW9jk-1762829848.7505565-1.0.1.1-foxhMbTSG4Q6DFnQe4QE3iGnTDU5os9kZyX.pvk.N9_au.kPia9r5geyMPQCgfzg3jecJSE49w9GuDq5NuGTvtantSuuhw_7e_fTHb0goruc7QTE7IUGEL0fM0H0k6AK; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85bab9d432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11908,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11908), with no line terminators","md5":"46980f2201eaa55d413c57cdccb9f624","sha1":"834f02666b22c34ae72825ac9230b203baf19b1d","sha256":"3480d6bd34c968b220c5a92a795e37c3316722d8e6fb15ea3fb0b855184b1de8","sha512":"d24fab6da5861728cb89d8735b833ff59f40f02bef408c314fd1fd28ec56446677ca9d11b88d3dc49a1eed87203e82fba994ddb9a87e962a658f342c22eb92ea","ssdeep":"192:5WTvapunXyUqungSUXEzd7gUZqMzRCqsSp1P8efh0V8mdZ1:5We4nJCK+qpxe","tlshash":"8632992beb4005275817cebd3ad4fbac4618d5a2e1120b58f513ef2469877e707e1b3a","first_seen":"2025-11-11T02:57:57.175904Z","last_seen":"2025-11-11T02:57:57.175904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.5841626328634979:1762828699:TFJU03FApSltDJZy_13DTYw8y9OVezw18DoFA0wgDzo/99ca85b6fe7832fa","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.5841626328634979:1762828699:TFJU03FApSltDJZy_13DTYw8y9OVezw18DoFA0wgDzo/99ca85b6fe7832fa HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12107\r\nOrigin: https://h5.gtbal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=RWk0cc0me45qcdhnefhF8SFb74UswQjkU1VMhYP69bU-1762829849-1.0.1.1-6ELeq6l6Ep6TsaALLKyTTUPKDKCP1l3IqVY7WGO.SZH0cTFvfS58ma.RLRmro.XaZg16XLO68IwsZhEnUVeQxAyJ3NtctAuJAyz0X4viW98; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-ray: 99ca85be9cc232fa-OSL\r\nset-cookie: cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=gtbal.com; Expires=Wed, 11 Nov 2026 02:57:29 GMT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/favicon.ico","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=RTccq0zgzwRz41uzG48BoY828TuWKxO0UQvi2E6QCdE-1762829849.1079233-1.0.1.1-SnHdcU5pd731eOcHVWxqftO5I4ySd6ozTknXJNx1Y7Sc87orXO7h7QrCR5dZi44BpdWRh1NTqLwU_5dJ0JpOSKDUezdP87Mgv9V7C_5okoQNOfIy7QnVFAo09ANfrKXE; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-8ce\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=4pqIoPoIoBER4nFsGAqtglCF5o5wOrWy6OB65_BEkmk-1762829849.5125546-1.0.1.1-Ue3rL.SMhi1xZfMJIEB8yUZc6.3S_ZnaLtSevwT06xt2ZgmLyPPcYW.I81udsuHB.PKRLJW2R8GgvzDnX3culR8w6KSJsHLqZgGqfB6kZnWNhQ_CO7E9fMRmsXx9f1sO; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bf7d7032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2bc7bd39a149156f3cfb4ec8f262115b","sha1":"b8e231ec8d6a670a76252ebbe834c23a3fd89a90","sha256":"dad6ee97c0ffe7c796f0464acc6196c917548fb040566db9c6c7787682066701","sha512":"2f114a51cfcf6c2069407750b1b01eaab37c2f02edcabdd824b170dd2d011f9e0137fb72edd40deb36a4c54f88386f61d6f3d9aa1833e40da71b656f7891252a","ssdeep":"","tlshash":"bf414bc5695de443489ff0354a35f99470b12c62cac6591ed5c6b03c255c9cb83b417e","first_seen":"2025-11-11T02:57:57.178748Z","last_seen":"2025-11-11T02:57:57.178748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/css/chunk-2b5946a0.1a15fc1f.css","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/css/chunk-2b5946a0.1a15fc1f.css HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=RTccq0zgzwRz41uzG48BoY828TuWKxO0UQvi2E6QCdE-1762829849.1079233-1.0.1.1-SnHdcU5pd731eOcHVWxqftO5I4ySd6ozTknXJNx1Y7Sc87orXO7h7QrCR5dZi44BpdWRh1NTqLwU_5dJ0JpOSKDUezdP87Mgv9V7C_5okoQNOfIy7QnVFAo09ANfrKXE; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-252\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=1_goee9S597CKnzoadJ54MV_yyzy1WxjcPD7_VyB8rY-1762829849.5236273-1.0.1.1-YXKBmBWhGvoYZmt8w416y5TObpTFZoYR4JtATvHmqKV04cnCcLJwEas.YA7RwMpF4GCwE20uod9n2WjYf.sQF1vUfPS9_KzhnZFH06ZTqzlqvyzU4_zV8QMMPWFFe1LU; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bf8d8232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (594), with no line terminators","md5":"379bada144206386fab9ef6c490a325c","sha1":"71d5063d5fd0ba02b058f5e26e665aa04571f7a8","sha256":"71cda67fbb2fd5d495ebb820f5c5ff9dc0cf41de4dc29906458c80a4531b2436","sha512":"2a6a59e29d409c68eca8138c99b3271841e2df6132564e3aa8d1cd666765115e7ece6344eeb5f18fa78f1ed9726b6657e9881e5314ed3cff94cef44136f42a16","ssdeep":"","tlshash":"e2f046bea018722a402bf4147891ce8e7b2ba086a303034db61bed39d6c39c128294d8","first_seen":"2025-11-11T02:57:57.180887Z","last_seen":"2025-11-11T02:57:57.180887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-0656f1b6.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/chunk-0656f1b6.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=hvBEGo7u8kqCdPhJA7KQT2b_9GfsLt3Ri3NByicm6yE-1762829849.5238812-1.0.1.1-NRHyOUGgkAzSuEj.emiJxpCPneJaFA9XTmT4z9KpzA8KPiPP_pyuSlV6a8Nen50LJcl1zehx8eg_p612h3xwFi.T8IqnpYLc_rd3m1e_uSVly9n3cIORGltafOjeDbaY; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-a96\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=T.iFAsqJ4QnxgJj6XcpKCeGyvoCvl6thXOuHNqsIf6Q-1762829849.591725-1.0.1.1-22DF7l2u2OW0vLO7YopzG3JEwbUULDVESYlB3g3qzPpSYcbwwazfU344KVsgNRHLSZd0kYry31nb2BDAifsZxL9Vs3wFNBFi4B.wpQ5BOOy9g6Ic7636mrdF40cFIGlk; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bffde832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2710,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2710), with no line terminators","md5":"db76ce757f7e5522271a9c06e528364e","sha1":"0ca195c283c278a726f5553d3a2727c3f2ea389b","sha256":"508542aa6b1eccb40c0f64ddd2ca2e546010716bef565ab5db829bf88d69f83d","sha512":"93f991c8ceed7c68ca3f754c8323f016f55f61d842070bc17b3fe325954d8cf952f786129baa4d15e06831f02f56598ca1529b69e1d08a316282fa21a86ffa6e","ssdeep":"","tlshash":"d851575e70cad46e8f278085603b3074a09e1fc49810ecd1ffb4ad6595e4e29072cbad","first_seen":"2025-11-11T02:57:57.182806Z","last_seen":"2025-11-11T02:57:57.182806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/img/logo.0a20d1a6.svg","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/img/logo.0a20d1a6.svg HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=hvBEGo7u8kqCdPhJA7KQT2b_9GfsLt3Ri3NByicm6yE-1762829849.5238812-1.0.1.1-NRHyOUGgkAzSuEj.emiJxpCPneJaFA9XTmT4z9KpzA8KPiPP_pyuSlV6a8Nen50LJcl1zehx8eg_p612h3xwFi.T8IqnpYLc_rd3m1e_uSVly9n3cIORGltafOjeDbaY; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-dd4\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=oR.jkdATW_4pE18lP4qGWH1_C7VQkXukwbWyjEHY1oI-1762829849.5974581-1.0.1.1-u5tDRj.2N94vAsKNu7hyZisrbI2vRBGK6H5iwYM2.dyK2.WoXgBAPv32ifHxNy0jcJJIf_9ObpaVZ1AH3sCzlugWdvbxEQKzGHOPLaRXgSwJVyPlopSc_.qlq56040sR; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bffdf132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3540,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a20d1a67c5b62fd95362587c31ae9c2","sha1":"6ce06e1e9e87b5aca2b954a58cba7fc9f687c916","sha256":"791fe0e461a560e66db7dc5ee06feb380fadc37e1738fc51276f6c2757eb4d31","sha512":"b3421cca0f12620e0893eaebdfb09b048aeffcc7d55c121f0aa8d79c358c390047f8a207077a20d23815ace667631cdf2476c6fee942b9bfac93cff51af4aa20","ssdeep":"","tlshash":"cb71c928766af92cb409f4fcd6018cf50a9dbda17502c204c9ad2d57d0a50a9af3f9db","first_seen":"2025-11-11T02:57:57.184773Z","last_seen":"2025-11-11T02:57:57.184773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/axios.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/axios.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-4908\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=lWpbXjs0.ZinTp2N5eR5ipkcn8riu9gcp5Hg3pbweh4-1762829848.746051-1.0.1.1-EGWHwYcxi1UUdHmH2zXQUMESK_ghsPVyhDHsWF74Kqss1dznFtWy_8YttvdrtI9uuMOiir7642GLRVFVglyQROx8WmMLc2T11ILNg58ZrgHvtBa.3dyB56eUjGfp.iV9; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85baa9c332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18696), with no line terminators","md5":"07e915b7fdf3499d2e6fcf0b0921c072","sha1":"7cde3d9c18051af0eec38c6b2ca7e9d2c8dbd734","sha256":"1eaf77f9d4a6fe062f7f70e8b977852bfae653008c715bafc37d63ff5733d01b","sha512":"8028174daf7957b8229ed21670bb411af628e797625ba335e6db2c42c67e06790da32d2acde22970c0210bcbed4bfe663aec0c420e0d7752a7b69c3a40f5a75e","ssdeep":"384:ayRqdJbNZRGNogYfM08umUROTF3oZ94T9eOZD8UwuDgq1MjWLs+S:rwJ/hFMUmUyF3DT9eAQUND70L","tlshash":"9382e7cdb594f0675ba720f4845f690fb2fb5329b80c8894fb51e4e25c3a51d8b23e89","first_seen":"2025-10-06T10:49:45.620216Z","last_seen":"2026-05-17T10:18:08.071214Z","times_seen":7,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-length: 0\r\ncf-ray: 99ca85bd4bf632fa-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/fd468eb09fcf/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=RWk0cc0me45qcdhnefhF8SFb74UswQjkU1VMhYP69bU-1762829849-1.0.1.1-6ELeq6l6Ep6TsaALLKyTTUPKDKCP1l3IqVY7WGO.SZH0cTFvfS58ma.RLRmro.XaZg16XLO68IwsZhEnUVeQxAyJ3NtctAuJAyz0X4viW98; path=/; expires=Tue, 11-Nov-25 03:27:29 GMT; domain=.gtbal.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10076,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/img/arr_down.a28d2222.svg","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/img/arr_down.a28d2222.svg HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=hvBEGo7u8kqCdPhJA7KQT2b_9GfsLt3Ri3NByicm6yE-1762829849.5238812-1.0.1.1-NRHyOUGgkAzSuEj.emiJxpCPneJaFA9XTmT4z9KpzA8KPiPP_pyuSlV6a8Nen50LJcl1zehx8eg_p612h3xwFi.T8IqnpYLc_rd3m1e_uSVly9n3cIORGltafOjeDbaY; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:30 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-133\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:30 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=bvKG.AzNHvg6I0uRdB2izJ08.pPR_fSunn8.uwlinPE-1762829849.600578-1.0.1.1-1drpkA1fUluwUUcMEnOmzDejvXi9S458_Kl2axRK1Tchiy6qn7qeMgXJRod40f8W8LkCJHKZVBoA4_N9WVvlIwx16m.bbCjWDZBDK4imawl3.crufqz6hjZLyLVWdPQx; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:30 GMT\r\ncf-ray: 99ca85c00df432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":307,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a28d2222e50651d1a16d460959a665ea","sha1":"209c63bb77e600505cf23da024d2a3e566e9185a","sha256":"d5ed97870d8b33a0f6c9603792b83061987d6570ca9d76269b1631e6d1e39923","sha512":"a7d3e06ae58bd782615cbfef4a2a4fee7d13f3d5ada3350231a9877bd1d01659610725bb048e8e441ce7666660ff14816559e3af3e924f22181953bd786aaace","ssdeep":"","tlshash":"70e07db6808cc5cc8a1fec25b5399867204ae0b3968c03bfc0806537f0864b60c02c25","first_seen":"2025-11-11T02:57:57.18783Z","last_seen":"2025-11-11T02:57:57.18783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/static/img/ico-kf.9365f170.svg","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /static/img/ico-kf.9365f170.svg HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/G75WEB\r\nCookie: __cf_bm=8BbmqfkRiqdV90LlLp1Mye6g_4g54hPKAIgrWzODLMI-1762829849.5914514-1.0.1.1-5XvHeXGogNvKIY8E3WSAfGPAF8TxwdzRQWx50uahk88mf_MA6CVWGPC6Y7ZEFpo9dz.E2zzgvqqImYIkMhiHaE1XROYXuptS8BOd27h2q_cjH2ipK1rpYqBUXT9FVnf.; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8; cf_clearance=sGsd5iigtAVaP7DjM6gaVEqpho2pWJi5M7L0C8SH1z4-1762829849-1.2.1.1-nChNXUJgey104mI4BaMKFNHiYQuhATsS7cvPrnzGTMWQ_vZtPxiYnsY7E9hagFhgMUWnqBWI0ztd.1wHUWASnoa8D19a4IZZPBq4O8NzY_QKF_KvBaB5TRoX9V_0YloujQRqia_NlUoPNB1ojd8rf3yP1tE5pcVeAR6wsZjdAmXwAKodjtRV14BSE2wEQwWZj_QUN8wmb_9ZDfdVUc1gltkwIy4X3bgBByvtmUeZzok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-3d6\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=NwsNetEl39q0k8GZV3f3sWQOCprBoA3Ot0uJ4LaYIqE-1762829849.668578-1.0.1.1-ae5l6hrRiZYxMAd2x0nJ5o06Xe2n5M81798G3a6oMC2B5CrwfIHSdgUI2RMxa5ybH_DvRLJRrKnR7MLbO02ccS917DrH5qHYWE9jm3GYaKdbPKnGPnm2_TchvHlRzXMI; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85c06e4232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9365f1708fc546177f59c2290e153a0b","sha1":"3797d0ffb2999a6182a337b713c528a0da753839","sha256":"0ea6012a3bc776bf9a32c3e64cc7e33eb9cc5b2318ff598a1dc964c6b408dcd0","sha512":"b497e5d97958eaa6ee707c9562c06381f496c776ae28b9708a595d821657a09f80a7741883b44f7be57bce026e90296beb7513e98a066a4541a7f753295cb4d4","ssdeep":"","tlshash":"a411977583ebd4c0a64a63b9d9fd3600b1fb01e4a3668c5082727bb0f814ab6083c549","first_seen":"2025-11-11T02:57:57.189609Z","last_seen":"2025-11-11T02:57:57.189609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/fd468eb09fcf/main.js?","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/fd468eb09fcf/main.js? HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=RWk0cc0me45qcdhnefhF8SFb74UswQjkU1VMhYP69bU-1762829849-1.0.1.1-6ELeq6l6Ep6TsaALLKyTTUPKDKCP1l3IqVY7WGO.SZH0cTFvfS58ma.RLRmro.XaZg16XLO68IwsZhEnUVeQxAyJ3NtctAuJAyz0X4viW98; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 99ca85bdbc3b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10076,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10076), with no line terminators","md5":"2e8d98e31767cc08e383e28d2b7c9502","sha1":"6b045a771f9b9b84845c39634205893aba9a2ad3","sha256":"7fe0c8a6aea8d26ef9c5488ed55b6690374c71a2e6311e49533a1f5de14acdf9","sha512":"e09c85afa6e26fdc1b9c75be020db0841f8cfbd5364e7937ee1f3d002eeaeb986e89f6b432600bf6a375d5d448467826064929bbd9a802c1ad15cd1090ea1e50","ssdeep":"192:llCeehDQkEK/388+QhXg9uR4zj2KQyhRByk5BK/HVvOX7JBwL:llrQs85MuR4zj2WXn8Vvw7JE","tlshash":"1522e8ca2d85e11592e158be013738db32da9f52f4c54b4c9023def0be1136c77a9d8a","first_seen":"2025-11-11T02:57:57.191425Z","last_seen":"2025-11-11T03:44:58.242483Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/chunk-2d208c2a.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:29.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/chunk-2d208c2a.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: \"690dbe32-990c\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:29 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=j4fWJ_iL2ZPhKWCsKS4CWxsK_YAHKJwBt2xIx5bavW0-1762829849.1053133-1.0.1.1-Hg5MBkVTDUukAzRq7F5KiTBze8DSswEhn4d8CLinocCTFuOzOgu9aqqUe7lS1rf0WH1jS8oGy4jgNd8exMTaamlzsTG9j48dFMtGp7X_uvgOXQdpUbth75dT17xG2Ifj; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:29 GMT\r\ncf-ray: 99ca85bceba632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39173), with no line terminators","md5":"1f8e387cae1bbf096d1a51bf47631691","sha1":"d98c0fd9701c0acba7bd8c13ec0b2d1e204a8f7a","sha256":"1cb0cc2cb6b52e0f70ce47dea671f4457dc80b81568564c3a211f9abc7d1b68e","sha512":"b4e93c872d743b6ae83939a46230de47d2362d60641faf2e24925d18e241de99da7a56b224821d16c545ae86b2fdd1e857526ac83a367f81d3e16690649e5a67","ssdeep":"384:cK/Hm5BSTYE7IRI0V9LDIv/qb7nT2gkACnPUPqJFSmE5E1VX/7qJGf4N8O7VHqK3:jbhX0V9L3jf0bJoTJWMvKXCSC","tlshash":"7a03f6d8b283b069437364b500bf504bb23e7d60645e8842d517e5e97ca9e6f8237ebc","first_seen":"2025-11-11T02:57:57.193562Z","last_seen":"2025-11-11T02:57:57.193562Z","times_seen":1,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/vue.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/vue.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-49bd4\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=r_WVZRptbJH0mMR6JYPoltckhR6iSrT3XDXlyw6gySg-1762829848.7504559-1.0.1.1-FUAmul2syrFxF_BFBPFDPDyCjBeWRccToE4VLQYuMB9zkSq5YuCHo8Clk6ob83ko6ofrWhF3xFUXXJ.rmFm3e0eRPruF77ft8Q4IJHqsBaFDtbZSxAKNroch._wPGQuv; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85baa9d132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":302036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61789)","md5":"74fb5c497615f0afd0c6a92ee4544a16","sha1":"77f88cc6f60ec6a569c5a57a5fd44aa8ece23822","sha256":"db72dedbf5894fff72efea95aeafc5b501358e4b0b68672154586b8af237c37d","sha512":"86cb4aab39b0e158a57e56b7431435acd2ec1e7a37bd02a471710f5e25d2c3ee77f8294ae3f5b60b414fcee3166f54a98e8bde095b173b5a7b70385f11841287","ssdeep":"6144:R49E2UTqKnOGdGBzAmN+j+5TL5G2NqqHEyG0Ne4TL:R49E2Kxog6RL","tlshash":"fd5408cdb391b06143e721a6516f5006b3372819a80ec098b166e8db7dbd94c537bfbd","first_seen":"2025-11-11T02:57:57.195614Z","last_seen":"2025-11-11T02:57:57.195614Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gtbal.com/api/country/list","fqdn":"api.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:30.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"POST /api/country/list HTTP/1.1\r\nHost: api.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ndevice-id: \r\nsystem: android\r\nlang: en_US\r\nContent-Length: 129\r\nOrigin: https://h5.gtbal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nset-cookie: org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en-US; Path=/\n__cf_bm=XoDeuwyS5aiBV4titb.qS1w0vtJo8_3q2b2nzbQrfxE-1762829850.0373461-1.0.1.1-JtnTDqX0fzhpuaxeQEv.1XrZQCQOShGiwIt7Sn1A7emiSVStiSFDyejREphZpPHEb0Vpf6IQ1e5iDJ6tP2KgJutHnyLvilu.o0CrVuQjmEFoG.PIDjldUJ5GjZ8jGGdE; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:30 GMT\n_cfuvid=yGdJZ.iKP5N_T.xRUirr.WGk4nAKbwy.Sl9lNqeeKNc-1762829850.0373461-1.0.1.1-liRO8lhz1YknhkpAk9Zds3mYOveF1kC84z8NGoLiaLE; HttpOnly; SameSite=None; Secure; Path=/; Domain=api.gtbal.com\r\ncf-ray: 99ca85c2bb564c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16150,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d2db18899379cb46f21cac362fcc98c","sha1":"35d0a305d15fc5140c66fec2d6c9d3a5a0f146f5","sha256":"d4cfdee06660a6bf78a2f9c4e291907190718ef3c511395f515c7ac5b6434300","sha512":"efc142b52851e9a1063b7208f64f889150adb224bfa3215a6f2f95e0ce8fd94cce2e194b956c9ca167600108eebbfc745d978536bd31023fd959d2f3f53d9ca7","ssdeep":"384:Ii4qNX3hylIK6hlBFzjyk+J/Hl0wAJwVzVGM5ZSu3xk84GI+NT4LAhwRwIblzu3A:pxs+uq1","tlshash":"c272797ec8e48a065aa4654479827bc3625b6f472d87ad4a37f4030c2f9e6bf203957c","first_seen":"2025-11-11T02:57:57.197479Z","last_seen":"2025-11-11T02:57:57.197479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.gtbal.com/js1762508306011/vendors~app.8807f4a2.1762508306011.js?v=1762508306011","fqdn":"h5.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:28.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"GET /js1762508306011/vendors~app.8807f4a2.1762508306011.js?v=1762508306011 HTTP/1.1\r\nHost: h5.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB\r\nCookie: __cf_bm=SKgVPz83I48NJSlLWdKq5nP9uZHH7MS_onmxVPly2TU-1762829848.1544194-1.0.1.1-uvWBCClnFMp4fF54Nb_2XU6bk0Z1_ij.IbEywSel9kkRkGORgI70RXhw.Yt0o5Bx6plsMrJl836oD5FMLo6S.lGyo2vQRsnInGNW5ckppd3Gdx3V9Pj.8GsTz4X5kaqc; _cfuvid=OZIMoM3xrmagPTzUMhz8u.XRQcxynElFjvTWyG9U.aM-1762829848.1544194-1.0.1.1-gIMSREIZhSwHE5nJBU5AwHIsUQ.9Rxpz.0_UDkkS4_8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 09:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690dbe32-560bf\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Nov 2025 06:57:28 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=GLEUIYvUTpER8OxESXSmvNsCsWfNKGSVdIFcAvvEnFs-1762829848.7486806-1.0.1.1-DAJ4SmwODYBc9m8kpaarGNXc6ZdGsFH1DHvNwsI3JOcoHMkE69dqSjN9LAXA0dUEFDFz82ZkyhH9UjWyeKepA29F4FprxvzMn8ajiu_eDKexBGv7Mzq4Pi.kRfbkrMSl; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:28 GMT\r\ncf-ray: 99ca85baa9ce32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":352447,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54043)","md5":"7835b495e70c061a083ae3bea5d900ed","sha1":"721df9a557ef7b26f2e62bd4c33225df66551710","sha256":"e87456a3a5343cf3440faa0acd40ab9339275b571c5d52ebdcd616427d910911","sha512":"d0cc21de6ef677605c05d3db32e64aa3b64c8bd7284e5853716c9f6425479f18ce5c0dbad6f904706bc15a8dd9a10e52f91b1dee794c1d166568f8b8ce394665","ssdeep":"6144:VagnFdjRzS2xmGbpJGDokQf/WDb9hZ/05P0:VNFdjUZ9f/05c","tlshash":"087419997254343806d54069806f194bf7362a2e245ac45cb368f4efacbcd8e31bfb79","first_seen":"2025-11-11T02:57:57.199384Z","last_seen":"2025-11-11T02:57:57.199384Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gtbal.com/api/captcha/get","fqdn":"api.gtbal.com","domain":"gtbal.com","tld":"com"},"ip":{"addr":"104.21.77.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.gtbal.com/user/reg2/?inviteCode=G75WEB","date":"2025-11-11T02:57:30.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gtbal.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 04 Oct 2025 06:13:33 GMT","end":"Thu, 05 Nov 2026 06:13:32 GMT"},"fingerprint":{"sha1":"1D:07:12:37:69:7B:3D:9B:86:AB:B9:2A:CF:83:7D:AF:02:EF:86:F0","sha256":"5D:66:2E:03:23:21:AF:9A:FF:F6:A2:53:8D:7A:3E:0A:73:F2:B5:57:53:3A:23:3C:54:EC:05:02:D7:CB:9E:8B"}}},"request":{"raw":"POST /api/captcha/get HTTP/1.1\r\nHost: api.gtbal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ndevice-id: \r\nsystem: android\r\nlang: en_US\r\nContent-Length: 129\r\nOrigin: https://h5.gtbal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.gtbal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 02:57:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nset-cookie: org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en-US; Path=/\n__cf_bm=xH4._N2R9X2Z605FpD_l1TGlU5c4D0dhU7oOjjnorgg-1762829850.0333393-1.0.1.1-0esZnw51yjnFzBS1oMqqqRWwQkqAK8MpNhIbpNcFqTLkGywUsp0jcjwfliArOLtaIrY3Ab6rFsFqEwe4NXDZjvAVL8.nmmu.JC2fxxF4bMO12Tbc9MBXdtl9Ziw2269Z; HttpOnly; Secure; Path=/; Domain=gtbal.com; Expires=Tue, 11 Nov 2025 03:27:30 GMT\n_cfuvid=VREvJFvxd9eMEQTAkYcXy7H4_tRTR20LAT7XJdDTOWE-1762829850.0333393-1.0.1.1-Yrj_lpyvSUUFFxRMtNNnKHCoqsyzf_utfv.R67EukaI; HttpOnly; SameSite=None; Secure; Path=/; Domain=api.gtbal.com\r\ncf-ray: 99ca85c2bb504c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2067,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"27a1759d09f9c28745af80cc3cb3d4d3","sha1":"2c6b195ab8310a8144446abe062f040fa296f695","sha256":"9536358fbd80a7e9466544129a248fb1b2703049abf910acdd246c273b57554c","sha512":"de0e339b29288edf972dc4aa9ce1ce294a5611223dac8c2582412938a10e0b1280e591365a717e47669f47aa671b9ba833bb817ba88b2e653aef04d8deb8ff4e","ssdeep":"","tlshash":"a041f7743e82e48ecb84f1d9580334c09d8e0f2fa12128e9688959a1bc7494696f875b","first_seen":"2025-11-11T02:57:57.201324Z","last_seen":"2025-11-11T02:57:57.201324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}