{"report_id":"00bea002-9492-4876-baed-9ecaca0c4a12","version":6,"status":"done","tags":[],"date":"2025-08-17T05:30:54Z","url":{"schema":"http","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"title":"Gemstonetradehub Limited - Innovative solutions"},"submit":{"url":{"schema":"http","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-21T05:30:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ka-f.fontawesome.com","ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":58377,"first_seen":"2019-12-17T06:36:13Z","last_seen":"2025-08-15T13:21:02.981339Z","alert_count":0,"request_count":5,"received_data":261356,"sent_data":2562,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-08-13T15:25:32.413099Z","alert_count":0,"request_count":4,"received_data":25254,"sent_data":2171,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kit.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":16651,"first_seen":"2019-03-29T02:12:52Z","last_seen":"2025-08-13T21:25:00.280352Z","alert_count":0,"request_count":1,"received_data":15484,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"node-ya-6.jivosite.com","ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1470340,"first_seen":"2023-01-18T14:06:31Z","last_seen":"2025-08-16T12:52:55.195681Z","alert_count":0,"request_count":1,"received_data":730,"sent_data":504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":196562,"sent_data":1143,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-08-13T18:56:18.10373Z","alert_count":0,"request_count":3,"received_data":224981,"sent_data":1719,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gemstonetradehub.cc","ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":76,"request_count":76,"received_data":8411005,"sent_data":43205,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-08-14T06:48:06.668248Z","alert_count":0,"request_count":2,"received_data":81194,"sent_data":950,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-13T15:20:17.649055Z","alert_count":0,"request_count":4,"received_data":437301,"sent_data":2058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-13T15:10:36.82984Z","alert_count":0,"request_count":7,"received_data":284915,"sent_data":3799,"comment":"","tags":null,"fingerprints":null},{"fqdn":"demo.moxcreative.com","ip":{"addr":"35.209.74.69","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2020-10-12","domain_rank":0,"first_seen":"2020-12-25T02:02:44Z","last_seen":"2025-08-05T22:16:18.411406Z","alert_count":0,"request_count":1,"received_data":19578,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2025-08-13T05:22:42.33957Z","alert_count":0,"request_count":8,"received_data":1367295,"sent_data":3812,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-includes/js/imagesloaded.mineda1eda1eda1.js?ver=4.1.4","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5629,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-08-12T06:14:50.6606Z","times_seen":23495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/share-link/share-link.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bb8540493a7fe11b229870eb37be165","sha1":"d77f17cb9057dc8f622b8c0bf23f6acb739b3b8e","sha256":"4a7ee62eb33f3bbb66c2151e5cac6bf4904e28302efc36128f3e3ccae6fde580","sha512":"fb245059108ee476bfbca60a96d401c2796ee44b646e0874d41b5fdb1204a66e3bec6a4ab8e155e50489b3adf48bd609683b3d1c020b9f39d084a915f8377773","ssdeep":"","tlshash":"035114e77b54e81707427472705b7b6ce3330405e9cac496c1a0b9a21f78697753da58","size":2578,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-08-12T07:59:56.777753Z","times_seen":8405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/prime-slider-site.min0a100a100a10.js?ver=1.14.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"98b6d4d9abe4b663b99c8cfbb424e20d","sha1":"e69a1e140db4fd23de6bb8dae468b79e666e302e","sha256":"516aacdbd6bb53bdb2e3e252442950a796ac789c2dbef61f1604ff4c80740a38","sha512":"ebe338d7b0cf3d99e1d8afdb871483ec3e9d2eb30bad889ff231aa2f0eb61d4231e29f1911f93365415876306cf9abf64e275bb46ec0679b8fb7e5f811f865c2","ssdeep":"","tlshash":"6311e739b4aae124500fb833d667ba7dcce3c6b560127582d6d040a96af9fe4314d345","size":1061,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-07T11:23:32.940727Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/ooohboi-steroids-for-elementor/assets/js/ooohboi-steroids-min706770677067.js?ver=1.7.903082021b","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"550cbf1995a2de078b164c24a8b293d1","sha1":"49c2a73aec476158f5c788cf041f88504f23231d","sha256":"5d50f9709e9652f62808535c2cda86d5eee932b8c2ba8dadcc686bbeaf374655","sha512":"c73784e2ee676abff023a8139dcc5b25d51217866ce0cdccbe94167df2f51d91ea56c61cb73f7153df1dfb541f705b0913d56e1a352544c4f6d27e1752a56a7b","ssdeep":"768:X3fCP1849F249C49e989e5gLS7a5G3r/gL6i5jJHzd:O9H9p9e989wo5zd","tlshash":"3eb2829bb659181626ff39eb3017208cba314f5ed8098119b1b849f79239fc13362f79","size":24637,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.195343Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/bdthemes-element-pack-lite/assets/js/element-pack-site.minb12bb12bb12b.js?ver=3.1.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bbe312efeca944176b9601e7a980f76","sha1":"c26e85c30d3707d53edbd35fe0879e07a8a2b5ed","sha256":"2e00d48f9b228868eea534d16cfaeed7a20d79139a8b05ad8086c76ab562cb4b","sha512":"d784b1e712039eec82ff66e386b5390ac090ac89a638310faadf95759c1ef6c0e5e72de92c5954d8413b108d3accd9296c1cc7754c0d3cf2a581efd1546326aa","ssdeep":"1536:ObhKZ19HN04TC3I0VH2iSK1q+OFawxu3Y2JiTLbM:ObSjOk+IkYJI","tlshash":"5aa39558b60a70e921bba137d36f361c603299b9b8025095b07690f45dfefe8331bf59","size":99705,"data":"","first_seen":"2023-04-22T04:53:03Z","last_seen":"2026-08-03T23:31:31.228981Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.minee9aee9aee9a.js?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8fa2dc6da9c7f2d5accd1eeea968957","sha1":"a92eb02cc0d7da44522a2e2fbba04de63624fc8b","sha256":"3c3ef9998414972b985076a5202e016ad4a71f9052eb1da62be10ed8f2752cc7","sha512":"b45b00eb35c5bab7feda77301322c049e1c92bb4d2da282838e1f54339caf8e0c81a40633ad4a2e7bf6768cb9de220292ac4e06bfd909e0a1fc368870483da7a","ssdeep":"1536:QEbSn00lbOatWbVhvZJbkyBBHhEhraD7U0mUiqlUlyYqfqNbx483qYjQmbyeqItl:N2oZK9P+i9RnDG6eHQ6U3","tlshash":"8be3e89930c2f47646cb617a701f110eb3322dac5486f059b6b9c8d29bb5e9d3332b79","size":156833,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.356373Z","times_seen":277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/js/preloaded-modules.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cf762f9c52e443339f018b55014acdd","sha1":"a287403f30d46cc7f9538c3c55d8d1dc322d498f","sha256":"6dc267c8b59839710feb0eca9a2b0674bc1ed663034099529dd882997476e684","sha512":"bc9adf79e67127fb89cd8660efe2bb4d2ae982431c7c41f0b4821b2e7238cffe8809d95ba4ada4a333429389833af306ab6be55f88574cfea344873b055f0076","ssdeep":"1536:GXrxpiqYD4LqQkGkRmdsq0WyzqB4Q7UgqVjWqDIWO8UqK9Mf6PfB//ro8xa3185r:6xX1lfBqntIB5","tlshash":"5443f99971c2f06642d7687a300f100e63371a98d844f519b572cce2aab6e8d3737fb9","size":58080,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-02T21:01:12.863328Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-includes/js/jquery/jquery-migrate.mind617d617d617.js?ver=3.3.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11224,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-12T08:11:51.592781Z","times_seen":86667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1755255284","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"58cb057898395224c34de479b002284d","sha1":"20ccc67a918a8c80a3ec0fe9bfaed3e7a31ac922","sha256":"5f97417096d321a6742b2f02b285d05f11bc18b44c33f7d25bd05e8576d63e73","sha512":"a832536bdb9bac0159f4ff1cb475b9352f9647a830fc751a95f5047f16dcf5ac77b4737ba6718a85072f8f71aedf4f10d4af314ff9ba5d7b8a281a6d0c57312d","ssdeep":"24576:BVSwSo6xbB0mjHeYoyuWFCmSQsVduyE4dD1ebzb5oVvUfLu+tj+WL4dbDORy:zSH0mj+YoyuWFCHQaQ+d5ebzb5otUfL+","tlshash":"01454ac5b1d0f06502d355e6a43b2009f23a2c5e3809b064f7bccddbea6659e6263f39","size":1205075,"data":"","first_seen":"2025-08-15T12:37:28.389156Z","last_seen":"2025-08-20T05:24:19.306273Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/3b6097d/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","size":10507,"data":"","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/themes/hello-elementor/assets/js/hello-frontend.min8a548a548a54.js?ver=1.0.0","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"991851ce021f42521a9b8c707500d731","sha1":"d3b7d0a28b0e6a7e0621f78b1ba440b52060cc9c","sha256":"bd29338c097619843470ad38187d0c1754d939b12fa755f4c11f9e53fd46b09f","sha512":"f26086ff2446bf76a1b89a701fa6ac2f88bb4976838a5a1f55cc7027b7df6b281aa1c803652daa32d4bfdd5ede44fd57de955dbc78c22a4423f8cdb16fed8997","ssdeep":"","tlshash":"2b510349b183a9f5176e917b6b2b540f719398de6000e0f4b239eace19b4c8073e3b75","size":3113,"data":"","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-08-09T20:06:19.082649Z","times_seen":1413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"9490b8a4a70e381d20346ed677b575c7","sha1":"c20e021d45e337614502d337bbea98199915c2e0","sha256":"2960f27a518b93a087c8fcc6223822e9aea2d18d60e578e46e8d1d67c2581eb6","sha512":"9dd805be12236a05748ed77018be93672cd5e19214baa4cf48d87a461ffbaa7c960cebadefcdaea00aa6751753497eee282eff89dab9f3780908b54f2f478274","ssdeep":"","tlshash":"b65100762ee2589565f308f7f62f1a0d3a3511030088e926b59ca6a02f3ede5c1fad5d","size":2635,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-05-07T22:02:47.740197Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ca09c802bc90051411e3e66d5729acf","sha1":"fb374e3c8cc7eba282b64ab51213b28a6681220e","sha256":"daad6b478d891e006965e30237111ab10faa8f3c98a57cc4a30ffa6173dbbd1a","sha512":"f6a8916f3fe38f0fc0179664830f8f79ecbbce1c1908615038b4cb401c0101246ae744319dbf1ee11f05cc0d8d3556206eaa0baee5650ef66eabc8c577faf812","ssdeep":"","tlshash":"ffd0a943b030010e08aab11ae381a9c876b88409013e4c247642a0cb3cb3fac230c0a4","size":213,"data":"","first_seen":"2023-03-07T13:23:53Z","last_seen":"2026-07-27T12:40:24.640003Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.5SD_KrlRKpI.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfq3iOuaNx-y01xXGDCkYtjOWUDvFw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"350c5e2cd2d9677a96f4c2847fb11f58","sha1":"46f29b46270d52f1860be04b9a66c440cb2c04fd","sha256":"c52a1f82550c424bcc64bf4856385562e11debb40e36bca40ec7d0c4048ac1eb","sha512":"812889353fb79a6e09cc72e0c96115b666d8bf6a647cf293884fbdc398d43b16ae54f6b0e7926c6562f2d490cc762870a4e067ceb0c3c5393eef82f376c2720f","ssdeep":"3072:ZzFV9KRr8lAgEaVyLZMrJUeCqVPJJjN8aZxu/9rjDP+ae+rYm6u:JPAgEaJ3YUu","tlshash":"b524d8d9b39270669363f4a6917f000bb13b5869f9484dacb28de8e25ef48190177f7c","size":222140,"data":"","first_seen":"2025-08-11T19:49:47.511594Z","last_seen":"2026-02-24T05:09:45.783207Z","times_seen":1065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8120b2dd6187bb546a5d3e3e6d68459","sha1":"e186c78e5a1765908c0b17619895697e95bc51e4","sha256":"b87b0b91347364695219eaa228740ef5f910ccf5fca60f323d6f5ad4b9c91470","sha512":"de41827050dd1d712c91850d45278e6ce2faab1e566b9d2f88b0a3fff2d9fa922887e099a18536cbc074ba7304dd612c735a251d9eb6280fed137650ff761d72","ssdeep":"24576:UZc+CAaJlb9dqNywgy00Hsr+gCHvFKI57veMwt01gi7nlkzlS1Y:Och9UNywgy00HsSgAF5LeMC01gi7nmzb","tlshash":"ac455bd571d1f4a907e355e9943f2005f23a2c2a7409e064fabcdcc6aa6658e6237f3c","size":1178431,"data":"","first_seen":"2025-08-15T12:37:28.3856Z","last_seen":"2025-08-20T05:24:19.279286Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min9f349f349f34.js?ver=1.0.20","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"749034f2041f637ed40dcd96f4fd9759","sha1":"0a03f9a53a588426d83008046d855089ac4c85de","sha256":"641991d00eeb0d50ac64f69ca705f8bdc72cb725a60c8d7f7ef5191cefd5a455","sha512":"6d0a3ec65f4a640cc8c48795cc5f6e3463c9a09c35cce0206f8c93c6e8ec936cef8a650df36d5ab6fd44c1b35b00acd09f972b7e8850962ca713c3a4c6904411","ssdeep":"","tlshash":"ed400000300c000c00303303c030030030000000000000000000000000000000000000","size":7,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-10T03:20:17.553995Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-includes/js/wp-embed.min41a341a341a3.js?ver=5.8","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"905225d5711b559d3092387d5ffbedbd","sha1":"6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d","sha256":"5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991","sha512":"5ad34cf11acf45ae256b2641496be13939cd5e0212810c43ab20cadbb313a1d99cb3a451148e160d80f1f952a8514480c2953bc6ca0c4697a466a01e1c3d5f8d","ssdeep":"","tlshash":"5c21522a3228943758db11d3bc4535cad2e11fed681215d20e38cc49eae4e935969fe0","size":1426,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-08-12T09:44:02.574675Z","times_seen":5650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.minee9aee9aee9a.js?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e16a8821e5f099c3a619889ea7cf0399","sha1":"a38e0c736aaf0b019b29b63b00e68c1381502217","sha256":"a48dea362116d7516a2cf97066a32758d353760ee02dbf900ddff86b02a16473","sha512":"41cf1eabfcd3b4752ee9fd1a7e7f5719249053bcad871254a9d9821e016b40a2fbc29797dc14035cda01628fad879c2fda47337853219f31250b9c7020d43cfe","ssdeep":"192:y4C8yiXSZPQfaNkLjEMHJx8vqOS5Z3N71jgiqM1xocYjtCDIoiL3:y4xyiXSZPVNkvEMHf8itN71ciqM16c9k","tlshash":"41d13d09b340203dd5cea3bbd02b9b4e337b192894f4e6256878d5942c76d9234d3bee","size":6595,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-08-12T07:59:56.927589Z","times_seen":6909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle25b625b625b6.js?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab577656d48e7fb2da4071c3477d4f4","sha1":"34a292f50ec979d7967a08c2ff4d707c39a11f3c","sha256":"8667a50fdab17dd946e43e37c6fd1623583b9440bdca887e44cc726e48feedaf","sha512":"4d8ef2d24d6f96a7cb3883a527c4151eb4894025b9af92ed0c8828aaaefd9b97e631e4b9a10a7d2f8171607c655bacde7c6c1aed5755929bc0b82344b32762fe","ssdeep":"","tlshash":"8f01f1af0770283941761391617a1718113843913b33bf3da03c254e10584eb673bfbe","size":810,"data":"","first_seen":"2023-03-07T01:16:00Z","last_seen":"2026-08-12T03:00:40.996262Z","times_seen":1986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-25T23:48:49.64661Z","times_seen":3253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"e72df8bc704381f026b7ed08d721d21b","sha1":"de5e23def801e2038312c51f8ef60a6b1188c1fb","sha256":"b705bfc8980aba654b01f1e59e6f95ebab5d1293569d11a0ba32dc6479e7bbb2","sha512":"0ab93b91b4d8168504692d3e1db7a1bb2e17601944fe9a272c75bb3cf27cb8c0e8fd09995803f4f60296b55c7511ff6cf27007916a513e1209d327b72ce41cac","ssdeep":"","tlshash":"68b012e25d1448a1af0ed007073f26ad3d80b947cc4ca990f82d6134cb25c7575d80f9","size":113,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-05-07T22:02:47.743996Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/bdthemes-element-pack-lite/assets/js/bdt-uikit.minb12bb12bb12b.js?ver=3.1.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f04cefbdf3fdff890a901ee9658a95","sha1":"da6a2fb47ccc6d59439ddecc25479afafc888c6d","sha256":"cd6abf5053ed4d54a862adc91f1a3a62117e22b53127d7ecadf1c7988b65b44b","sha512":"8d98bca1a371cbbd838226fc82c9bcaf8a11e4444dd387adab6cfde41aa0f60becc61b0bc018873f88255ea91fd310e7482caefeb994b2d45fd9b9ac738434c8","ssdeep":"1536:WuQJK1pUBnFqyE8wIeyHer5Rp238a3P34L3szMNoQygVcIBEVxt6alfspQbobH4m:ssBRpc8a3f4wgVcusacobY+3T","tlshash":"ebd3b5ceb3d5b05143a36171916f560bf23ba884790b4198f639e4ca7cb894da07be7c","size":133873,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-08T20:38:40.269204Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.minf269f269f269.js?ver=1.0.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"046405de007ff73e52d17dab2af75258","sha1":"887cfb8a9de27005875f6e1c1d1ead43bd0865c8","sha256":"533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020","sha512":"280ff860a90ccffbef838f17a64c02abff9a806fd359a8e110e5d3e44b5a4961fd38637e242e431a7593d8ced74946bbf1450b6202341483bf89ab70d07660eb","ssdeep":"768:e44yLMNvgnDwYB+IlnHB9/bNlJyI3G7OaXiQx9kpETpUwnOQdZMvUtVo0uKHp+3:Ir6pyYG7OH2pHZMvUtzO3","tlshash":"dbb2b3ce7140706386eba1f8519f1a2652336026a20755cdbc3eeec55e68e9532b3f3d","size":25202,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-12T07:59:56.819308Z","times_seen":19379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c3df92328ee974c515451348521e583","sha1":"1be6206d8f37e4c5e85f37afb91f330432de993a","sha256":"0c220d7ecc7f7a63bcfe8d9b934b741967652941dccded47244f5cc9fb67b44a","sha512":"bf40e65c3a98d3b5707251188edd78b6e09503a6e29d927ebbe4862824f61e3f0db855a94e3054e909ef5a630d05e88abe89e7bb2a768d011486bd31fb90e17c","ssdeep":"","tlshash":"bff0ac62cdd42c67189015d2313836d6a5a0a32fba18fdda3dac428c8f196849dda9a6","size":625,"data":"","first_seen":"2025-03-08T23:03:59.367385Z","last_seen":"2026-04-16T23:48:48.917466Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"1dc7747dea53c7b28e68684aae5e419b","sha1":"cce81eee4dda4bd4b54c5d7b9ad031918fecc44e","sha256":"0a68234e907c4a66f6267ae8bab749046c206f72de09429af7cc855921f63676","sha512":"c7d6fd75837ae29edcb7dc86d1d414976502b0162ec2ab81249e3807a6f0b67903cb7f7ecbac038be11a56b6c014a9e54578f30912d26d4e4b7ef290f6a9b815","ssdeep":"","tlshash":"0bd0a73666c1a592d1a070c3b26c358c59d0bb6b2918d4c5fe1e919c1f91f20a3ca1f6","size":239,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-05-07T22:02:47.760841Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"cae71d6d6a53a01f7e937c62e8b7c1b6","sha1":"f9d3d8d8888a55bfcab6708118b88867453c8558","sha256":"d71cce83cddcdc01e3354b5977f97d94db57997afa6085b896afb9340a1a4965","sha512":"652426e4517f3dadaaa63c43ef37d4346014dc24f5a26689a99949e36e55b90025c2914cdc296bf47a3598c33024a4399487cb4e1acdd29361fb2a4bf617aadd","ssdeep":"","tlshash":"85515235fed46c778192a646742baa47353c031750087cbef8ac4abc1f36a721687927","size":2609,"data":"","first_seen":"2025-03-08T23:03:59.390165Z","last_seen":"2026-04-16T23:48:48.927455Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts25b625b625b6.js?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"90ce4935de303e507fdd63fc10d8cfe0","sha1":"2df0e3d3d2a17bf0e91dfde79986368e8434bcf5","sha256":"dde5411c7fb7ec253b730f4e7f512b09fc30384496ac61f418e49911c87a0bcf","sha512":"19555c818d86b8c04edc0f0eac4428af52f814423c4102698523ed56ef2f2a8abd9439aca9ebd4ea20506434f76b668deee761656a2d5456a9a2b775e1524937","ssdeep":"1536:n5/eYq37mRUGEoEP+BCPmn/D3aRiohwKOYLvD1r+9Rz62bsSyWFsX4h4iISfR3j6:n5/eYqrFGebPmnbn9zsI7fAqbPmnOZa/","tlshash":"efe3e74eb340342542dbf17a926f160eb337a51ca60780acb569d8ea6db8c4d2137f7d","size":146284,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-07-27T06:35:58.193482Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/mFg0ggm4CC","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2fd5f83b820658e634fba62af186ee2","sha1":"507dc7b7ff41ffdecf02224f5003ce3c7f0508ba","sha256":"43df2697e331f66bd97761fb53412da040517f891dbb2e67de403a5f0c5b44e4","sha512":"cab4a248e191bbb6034182a7eb3679c0f4eae38151fa88a1fa3ae14c00523e6ec8d02ed66be3a80c372b26d59c49dd0c542499b8526a80b53360058e2e49853c","ssdeep":"384:boUJJkQamum040GrANHQB7HMiqJIlEeJBz8U08wYWcPY4:6tMlAWB7WK8UFWcPY4","tlshash":"7b822b6e7959b97743b208b9606f6209733549ebd404c920a401e94d7db8edf823fef8","size":18043,"data":"","first_seen":"2025-08-15T13:06:27.223503Z","last_seen":"2026-01-29T03:56:40.275061Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-includes/js/jquery/jquery.minaf6caf6caf6c.js?ver=3.6.0","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"02dd5d04add4759122013c5ab4dc5cc2","sha1":"a45a56e396ac549b4ff39b696ce9e0c16a7612de","sha256":"bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea","sha512":"04690d9875e98f5ae6bf94f5c71b7a0177b374bc09609a0f58312e1c337348749a40e07fe226737dc248bd8fe2f6a489071258619affc7f1df644e4255159615","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e99309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89521,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-12T09:44:02.629808Z","times_seen":60293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/_/translate_http/_/js/k=translate_http.tr.no.5SD_KrlRKpI.O/am=gMA/d=1/rs=AN8SPfp3PL-du8rl-408bcPTCY0LT-9GJg/m=el_conf","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2712aae70653a199ae2bc52ce8fdaa25","sha1":"a5b1fcf06b3aa5137512190b85282ea583d29791","sha256":"1ac203a85fd737d0880caae337721d1a99f53f3dd86ad6e576fa09c702245e5f","sha512":"10fe3cfce29e408be0ab7981d48a03751e1d7c0429cc4babd81afedec5888ec018dc4614058c4116e756fd036caad5a52fac057f38080076f78e06858b092c42","ssdeep":"1536:XH5OBUXAex+GUw2vCzFsgKbTiK/Hb321LcgumlL1HviOwNWum:XZLtzhKbTXmx1viFm","tlshash":"8973c8c8b6a674668267f5b5513f000fb23f5899e80c4cacb288d8e16eb5949413bf7d","size":78883,"data":"","first_seen":"2025-08-17T05:00:32.54181Z","last_seen":"2025-08-17T05:35:04.360206Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/dialog/dialog.mina288a288a288.js?ver=4.8.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"58baf0f238d7afc7ab926b8d51e5b559","sha1":"8515e5f578269e29c048450f78c107935d325dff","sha256":"2989e0b9e836cb9de3274d641ec6a58c2052f039e790ddd59b22303930bfdeeb","sha512":"a15d0799c93d0c93789582d5330bda9aeb5332a2ef4917fe0f6a758ea77a1231b976dc960ba17d0038bd16acb34c62400ec4213ab458d1b301fb6141958fa005","ssdeep":"192:sEPwJdswSRibO6JSplZn41SFzpYK2p7ESa/TI9w0uV6uSnotk+nWEdpTARHrLG4/:FH6JElZn4WpYKC7E5rI9oV6ultk6tIe6","tlshash":"822286c5f155396687bfb034713f230a223748ecf8445c68bc5d95e1aef8a4e02b6b69","size":10863,"data":"","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-08-12T07:59:56.933618Z","times_seen":6147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/js/frontend.minee9aee9aee9a.js?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"cda664dc6f8021f3a97f8f8bc7e945bd","sha1":"76e8f6c2632b5d564039411ef3e0b02ca8fd0982","sha256":"12ab3055558fe541bbd70df670dfeaa2f778cc13cd1074b7c5e79ed1a20f86ac","sha512":"5d4bba91cb2542325f18db370142651cf0dc069f825627459892c3f2e20c727d1ff657d1963750fbe068816c8146e01328d2d18dbb907b04588e413d8b60245e","ssdeep":"1536:bNuVONnQ51H6PHh6PIZaKOleNjb7YzJcDXRuHiqVnb/Q4:bYONQj/f","tlshash":"2c43e98a3092f4a213eb9265502f000bb3771ca8688de590b775d8f1fdba85d7167b3d","size":57125,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.270971Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor25b625b625b6.js?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cfe6c73ccf0a8f2e4566818f1af8f0e","sha1":"c25035282d2c718cd1acbb04276328411e14ebe6","sha256":"0159c7d88a5475d3596e530aea480d6a7f5b1a4259b02111a64d13c7a79c2c44","sha512":"efa73ec8da3916204005ac6693900a269941ebafe155b5b8b782317a73dd0acbc5a43a8362815ff469c17cc8d45606b8eefa62c1922937c3b54715aef00d0745","ssdeep":"384:FsCKj/IfE4AoCifSM2JxrDB5evnmcK/B6fPlaByRNCyyBN3+yrNoYy7NKSFyDCy0:FsCKj/IfE4AoCifSM2JxrDB5ePmcK/Mb","tlshash":"eb627368b191306215bf64ab53af131f73f35469d9474020b2b642ba8ffec44389ee1b","size":14778,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.253332Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.minee9aee9aee9a.js?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e5a87bd531d53a58ddd15e491ddd82","sha1":"954201068d4d7d64e65e98287da3d10e995c6b8d","sha256":"f63f9da97a793227b906f8baf1ef3299ed5fa10ec94ad03f920a863c613dce1e","sha512":"91318f41eabb23fe1d31894ae5d198022b74818bbadef3becb2b580871b63b2f2f871adc8b6fc3632cd4a4239ef36e58b06642ec2f778286540380b93736669c","ssdeep":"96:Bs4JxUTSq5wScUX8VGJGoPT4VELXlUN3cAVibV0GQKZ+ftpadfbHtp:64JqTSywSaVgGoLEELBAmCdKZms7P","tlshash":"23b142d41a90fd2732e139d5e15b67712a2ec0333d26b9c1fa25dcec54e8ed083aa971","size":5536,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.220352Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/a7077a5c05.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d86aff5e9ccc8d5a03e22792236b18d","sha1":"13298c09306e54dabb162ca18048da36ff574505","sha256":"46383ab22e429060436132b728a3b249782ca5c3e369e0db402121ff114457c1","sha512":"94af02964f4dc4682364e8194430b90ccdc1f9940dc19835cce0b4aad3471f81699a578335bf6dbe22db6b82d68f5763d4855b8438009f478dd36746e574f712","ssdeep":"192:ukGliHAgFqICpzpV2chiHCpgeM/ZhnlD5Nu2ExDQZZuC4PvMxDyNafVvh3uYXylz:ukKmCNwCaZhln20MFG1h3uYXyl8Y1eK","tlshash":"3862e75d7a81b47a86af7192843f670fb279343b30129420e25dd9e4acbcd5ea123f1d","size":14876,"data":"","first_seen":"2025-08-17T05:31:05.067963Z","last_seen":"2025-08-17T05:31:05.067963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/swiper/swiper.min48f548f548f5.js?ver=5.3.6","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"15bb2b8491fc7e84137d65f610e1685a","sha1":"cd76b70a5426893e9c022b9a75c50a7c1348e2d0","sha256":"b23f49f504faa32aac548b6662ffd64412f6738496fab8be38da46c5b7121804","sha512":"95c05110b29101c84df71c54172269f478d9cd14965b3de987613e11e0f1ccf01c1b7d2bf290d97ef11373f24dccd677f8710e1555d332903181f469d0f2b0bb","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgA:wxoo6desFshaKi+HgZsUOUTqiqM37ER","tlshash":"6dd3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","size":139153,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-12T07:59:56.827104Z","times_seen":22795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c490f2f749fe40f16bc76b0416a766d","sha1":"316fc90f4d21468f2a6ed859ce60c0e5d547eb63","sha256":"1c083cc4233c06c4ea748a867dd49b51bf5a687053f7622979388261f06d224f","sha512":"5240a57ec4a67d756f2f42ef05aaf43aa34ebefc5909a4dd153e4cc1833d2569ed0cdcc0d9111e6496180a64b7723dbe3feb7509d281cddfe13bea3d332119a0","ssdeep":"","tlshash":"b9418b2c25b3722681737979d76f7264b125d113a048d8043e5f53805f50836f5eabe9","size":2323,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-05-07T22:02:47.765604Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da05da05da.js?ver=4.0.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-12T07:59:56.82625Z","times_seen":74484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#248","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-11T13:36:35.044853Z","times_seen":37118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"7792b9379b14726891c9736150c81225","sha1":"ffd65ba18f96e2526be50469e23a5a8a6bf2946e","sha256":"7e2c762f1856e5618f55583edc14ab744834031843e6f5da37650c8641195094","sha512":"6984cbca7a428477c36de16fab8fe113836d89323e40ea9cc22fc89bcba8cd2db2b1cf99eb754b023ff95d6fd232c305e6476c7b94de74bc8000256b89eb04c1","ssdeep":"","tlshash":"04412816def64d25c619a18418ceaaaf38e0932716ccac0e759ed05d1f75d7280c533b","size":1965,"data":"","first_seen":"2025-03-08T23:03:59.398009Z","last_seen":"2026-04-16T23:48:48.93941Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script25b625b625b6.js?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","size":40,"data":"","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-08-12T07:51:56.357661Z","times_seen":29778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/js/webpack.runtime.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0efe313362be5e87fe4baf5a1e598b0","sha1":"6e08c0dc800b06e017c25706a8e3fea6c9baaa2f","sha256":"6e46b1ca12ff39f3ff3f8da5bf691cc03e9e896c9eeb20685e98d622eebfdcc7","sha512":"4df43b0a717b0920bb7018a28a004dfd38a254a7365763ca6bf4d19efcea7045f6448daf1e83cd43d6b750b833e0a401027a97d410f465f0d7b6e47f78db665f","ssdeep":"96:BVqHQS4KssNDNxRLGR/lXlueGV1fssVv4efnQeK/CcJUb:jqwS4kBdLqNzGvl+GW/ab","tlshash":"21a12ee51b90fc2b71f135c5e51a6730662fc0233d16bcc2ea29dcd955e4ed183aa931","size":4769,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-02T21:01:12.850072Z","times_seen":419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/js/frontend-modules.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ebc90177e75bb2e98e758eca432f280","sha1":"1289fd510aa68961c4cff9fffb974410bbcf7dcb","sha256":"dabc35303b9836b92014a59be540691515312f3af112ffe57b6dbdefb8f8c77e","sha512":"776e7bc4e5f76470ff2d1d07dca2cbb7dc668908816c4f80b4d7081abe0d07521ae8a430ffd7e40cfa1dd54b4bd95118f97618089a7379a7506b6bff7a96a80d","ssdeep":"1536:sDFdqcFjyAlENEeDq6/9m59Clae6dxx7A6htTF38tzfFKQt4RcSS/rq3FpC:oqcFjy5rq3jC","tlshash":"2853a58a7ed2f4b947e7a550902f440bb26b1ea4600dd4d0d767d9e0a8b898f4277f3c","size":64914,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-02T21:01:12.840441Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-includes/js/jquery/ui/core.min35d035d035d0.js?ver=1.12.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"49fa677b9cd7ddf221dc06537b35e10f","sha1":"7485f3f99c3c1a57197f2b099f3f8d68b8609d06","sha256":"0cd851e5b33af0fbb354df65506da39807b998e07723f3d08aba5179fa2ed97e","sha512":"40d50c965db656d352c1e73bf3ff9e82b64422398974d55902b0eaab213ff255af9338c33d09a8b148da37b1a13ef0377de2b510f6b5c7c42c8f866ba3189a54","ssdeep":"384:8uMSX9vEqkTVScdV/vWxcHsiW58furhDGXvhHQfww/Xc2S8mFkF50y:iScPy+hkLqkJ","tlshash":"d692e68db2453815c5f79265403f935fa132e29cb10a889df4bcc9e92c7ae992073f78","size":20787,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-08-12T03:00:41.003129Z","times_seen":5656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/js/frontend.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a57515d96bc03b5676a8f95a75a2d958","sha1":"bba62799d460ae14e96f5a51d57d44f1779b3f28","sha256":"f66a12b374f51d5ff9b6b578b651b27a5eb0ee168ac53f796f3a90b7ef630a93","sha512":"ba7ad353afe66a95a01ab1681ceebd3b8270e934c5c66205c3df1f6ea37084653397f5c965b17fbdd2d288ebd8394c8b1913094a2cd03900faaaa61e9a6da273","ssdeep":"1536:2GItqmLG0VtVb9rqI1xz8SUQ3SeC5aBUviDZWtZwJSI/fY9N+qDxc1C9yUtg7RmT:7IL6dNOhlZk","tlshash":"01632a9831c3f06582d7a579602f110ea2761da88489f154b13adce1aeb5e6d7333fb8","size":68177,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-02T21:01:12.833999Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demo.moxcreative.com/kingsley/wp-includes/js/wp-emoji-release.min.js?ver=5.8","fqdn":"demo.moxcreative.com","domain":"moxcreative.com","tld":"com"},"ip":{"addr":"35.209.74.69","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-08-12T09:41:11.403851Z","times_seen":212452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"828909265f08312335ab1002e38cb172","sha1":"cdb1c81e440a4122f6c9096d4fdaccf9dc3049c3","sha256":"73cc068fcab9befa6649b190200b9741e757d1c340edb91a3560965cdb4b71f8","sha512":"3acbe4860fd7b38915377d3e8ad057f7a683c938df22fc77d7ffe8827c75f3d0c0261b1d53aea09c492984b30efc9b14793037e81bb38a9b930f30a057ba6dc5","ssdeep":"24576:Whc+CAaJlb9dqNywgy00Hsr+gCHvFKI57veGglM1Np7DlzzlS1G:sch9UNywgy00HsSgAF5LeG2M1Np7DBzD","tlshash":"db455bd572d1f4a907e355e9943f2005f23a2c2a7409e064fabcccc66a6658e6277f3c","size":1176623,"data":"","first_seen":"2025-08-15T12:37:28.395331Z","last_seen":"2025-08-20T05:24:19.353958Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4c6e8124647b170cd953b1ca736a4d91","sha1":"a91cdc3268baf04626bdbd1fef2ca846c55f9998","sha256":"8c73c5b0128f68bcbb25b4618d7c981f909a91116e2960fe9d55129408a137d9","sha512":"459058f390c2208f8b784d87de1fff724849157f85da0b92a3c13ac760e29156d9b713ad04a85e7f6190d2c139e83e3c9e9ff87ef5750199f95110fa8d10828c","ssdeep":"","tlshash":"3f5150a2605ca01b4503d5d0f8a23eeef4de0058c77269d07e2c29efdadacbb049715e","size":3010,"data":"","first_seen":"2025-07-30T19:19:55.929911Z","last_seen":"2025-09-30T18:22:21.357577Z","times_seen":2866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"code.jivosite.com/css/3b6097d/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:38.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/3b6097d/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 18461\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"689df785-481d\"\r\nexpires: Mon, 25 Aug 2025 10:57:59 GMT\r\nlast-modified: Thu, 14 Aug 2025 14:49:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-15T10:57:59+00:00\r\nx-node: m9p-up-gc29\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113923,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a9e4d2e1c67b9dd356612a4a436f6f64","sha1":"72cd18c1d87929ce99b531bb6c389c885f277c39","sha256":"c4fdd79776f09b86eed791b86aa3bed3bda4b9b0e9f23d4a582465f73301a700","sha512":"3d856973d22f53a90248375c0e1cde9d4cb2168aeecaf11c3db016fdd200adb1b61c5ad7c70503e0aa1e4810531015e0b40e0551eb67a6fd02514b433b278582","ssdeep":"1536:eL5gTKSyw6564rhPDuoyp252ZSEphyI6A6R++lN4JU362FAPQPi4OPOKDo6CcDly:fSh1SRlsQul","tlshash":"dab3b86aead2953ce51e691a8dc5aa3ca63dd102cf330daff340e3d547c66e30276905","first_seen":"2025-08-15T12:37:28.327911Z","last_seen":"2025-08-20T05:24:19.189219Z","times_seen":78,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/css/post-442df62df62df6.css?ver=1627661472","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/elementor/css/post-442df62df62df6.css?ver=1627661472 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 35353\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35353,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35353), with no line terminators","md5":"135286cd7b96209439d4722c72ad7941","sha1":"db652cc19f1ca5b8999a456c26b0c803e150ca21","sha256":"85e89841a4c7be7008349ed5901a0b5568df75d2f8c73e8339929dfbfc6a152d","sha512":"436dc39982ca199de4c9bbcea3634592e0a98679ca52be3d8806e96d8264e03bd202945d2b264dfb925dd5db8fb089eefd7808a5a199520833eaca76b7af8f1b","ssdeep":"768:v8t3/rGyylQqJItLDedujdjZ72X5xkBq2zG3:v8t3AlQqJItLb2X5r","tlshash":"70f253943e53896ab9bf248f5647b19ca028dccdc83db7f6f8a48213f1b5e423394951","first_seen":"2023-11-26T16:49:08Z","last_seen":"2026-07-27T06:35:58.15558Z","times_seen":39,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/2021/07/1.jpg","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/2021/07/1.jpg HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2137\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2137,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3","md5":"3d65d1114983825e91de7c9c2bd67103","sha1":"249a05904e52c5046673b0c8efec98bff9084b87","sha256":"a1beeb4413af5f521a112b0c8d739bfb64250822ad6062e1e2434887a31700f3","sha512":"303f20c0983436fca37df2ccc2fc35ab6425383f6e4a79ba83901283a4c7c3916b81211764805eade4afa0c33eae6f9769ca17e208eb48288003f9208edb8cc2","ssdeep":"","tlshash":"da413ccb53dd5107e46c78321c0598a8e30d36b6348664b7f820db78c7df06c6e0c2a8","first_seen":"2024-08-19T18:57:27.815038Z","last_seen":"2026-07-27T06:35:58.132137Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1640,"timings":{"blocked":1529,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/js/frontend-modules.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/js/frontend-modules.min3d363d363d36.js?ver=3.3.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 64914\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64914,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43289), with LF, NEL line terminators","md5":"0ebc90177e75bb2e98e758eca432f280","sha1":"1289fd510aa68961c4cff9fffb974410bbcf7dcb","sha256":"dabc35303b9836b92014a59be540691515312f3af112ffe57b6dbdefb8f8c77e","sha512":"776e7bc4e5f76470ff2d1d07dca2cbb7dc668908816c4f80b4d7081abe0d07521ae8a430ffd7e40cfa1dd54b4bd95118f97618089a7379a7506b6bff7a96a80d","ssdeep":"1536:sDFdqcFjyAlENEeDq6/9m59Clae6dxx7A6htTF38tzfFKQt4RcSS/rq3FpC:oqcFjy5rq3jC","tlshash":"2853a58a7ed2f4b947e7a550902f440bb26b1ea4600dd4d0d767d9e0a8b898f4277f3c","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-02T21:01:12.840441Z","times_seen":418,"resource_available":true,"data":null}},"time_used":1055,"timings":{"blocked":940,"dns":0,"connect":0,"send":0,"wait":112,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/mFg0ggm4CC","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:35.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/mFg0ggm4CC HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6185\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"689df785-1829\"\r\nexpires: Sun, 17 Aug 2025 07:30:36 GMT\r\nlast-modified: Thu, 14 Aug 2025 14:49:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc50\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18043,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18043), with no line terminators","md5":"e2fd5f83b820658e634fba62af186ee2","sha1":"507dc7b7ff41ffdecf02224f5003ce3c7f0508ba","sha256":"43df2697e331f66bd97761fb53412da040517f891dbb2e67de403a5f0c5b44e4","sha512":"cab4a248e191bbb6034182a7eb3679c0f4eae38151fa88a1fa3ae14c00523e6ec8d02ed66be3a80c372b26d59c49dd0c542499b8526a80b53360058e2e49853c","ssdeep":"384:boUJJkQamum040GrANHQB7HMiqJIlEeJBz8U08wYWcPY4:6tMlAWB7WK8UFWcPY4","tlshash":"7b822b6e7959b97743b208b9606f6209733549ebd404c920a401e94d7db8edf823fef8","first_seen":"2025-08-15T13:06:27.223503Z","last_seen":"2026-01-29T03:56:40.275061Z","times_seen":83,"resource_available":true,"data":null}},"time_used":2697,"timings":{"blocked":1292,"dns":138,"connect":55,"send":0,"wait":87,"receive":1,"ssl":1119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d552d552d5.css?ver=5.15.3","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d552d552d5.css?ver=5.15.3 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 57912\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-12T07:59:56.79942Z","times_seen":27943,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250813","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250813 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 17 Aug 2025 05:30:37 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-v7n_VvgKBCWC3OLKUJJjdg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw0pBiEOLh-Hux9SibwIPPHU-YlJSS8gvjS4oS84pzEktSi1OLylKL4o0MjEwNLAxM9QzM4gsMADb2E0w\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=28.SE=f_n_QobOqVVIHWRm5GkOzhT22wqHRzQl63q2G4lTYPDZXHP8e8DkMsT-n_FrEyT3ZH8i2hb37kyhg3n7i3BG9ASC8hUxq4LEMXa61VIOHE8eaz2VUUL_5Y0chVWXcI8SfYpPORKK89VXlkZmTf02WFyUYQbVDzZLHRJXcE6bB4MFV9rtoe0jf8vdE5v6o0PyZ_JQjQA5kVDqxxmmMktk-kfwZe_qVNiV9qpFse2821BYG8ZA; expires=Wed, 16-Sep-2026 21:48:55 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T09:40:46.068026Z","times_seen":17853067,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:39.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:39 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6899c524-eb0\"\r\nexpires: Thu, 11 Sep 2025 08:12:15 GMT\r\nlast-modified: Mon, 11 Aug 2025 10:25:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-12T08:12:15+00:00\r\nx-node: m9p-up-gc8\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.729195Z","times_seen":16740,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons25b625b625b6.css?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons25b625b625b6.css?ver=2.3.5 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 120585\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a4e36e37cc889d87f1749bf9ff7a4d3","sha1":"42910d46d63c44a7959bd582d07eca4ec2407c0f","sha256":"ab7bbee5fab146d435419ac6d7d46519c934e81a24a02f49622df828520efd19","sha512":"9fe1745d0115d81858cfe6578d10e1f95205eb44bba1b70609b101914b2ae74b63a06ed95a2da7a6b7fd9e018cee76dac7e73b27b927b78af53239dc45b111b6","ssdeep":"768:myEgG8YRb1sJ+re8pg0jSXgxH1qzCj8NIgb6MpedmxSAhVejh+Z:myEgGz/Sm1qzCj8NcLAhVeg","tlshash":"cac341d4cc4d6ac1ab78c80f4324b609dd5076e29de24c27f4af8d4d0bfaabc64e1656","first_seen":"2023-11-26T16:49:08Z","last_seen":"2026-04-16T23:48:48.824427Z","times_seen":5,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":117,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts25b625b625b6.js?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts25b625b625b6.js?ver=2.3.5 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 146284\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146284,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (45027)","md5":"90ce4935de303e507fdd63fc10d8cfe0","sha1":"2df0e3d3d2a17bf0e91dfde79986368e8434bcf5","sha256":"dde5411c7fb7ec253b730f4e7f512b09fc30384496ac61f418e49911c87a0bcf","sha512":"19555c818d86b8c04edc0f0eac4428af52f814423c4102698523ed56ef2f2a8abd9439aca9ebd4ea20506434f76b668deee761656a2d5456a9a2b775e1524937","ssdeep":"1536:n5/eYq37mRUGEoEP+BCPmn/D3aRiohwKOYLvD1r+9Rz62bsSyWFsX4h4iISfR3j6:n5/eYqrFGebPmnbn9zsI7fAqbPmnOZa/","tlshash":"efe3e74eb340342542dbf17a926f160eb337a51ca60780acb569d8ea6db8c4d2137f7d","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-07-27T06:35:58.193482Z","times_seen":74,"resource_available":true,"data":null}},"time_used":959,"timings":{"blocked":798,"dns":0,"connect":0,"send":0,"wait":154,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:47.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemstonetradehub.cc/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1196\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://gemstonetradehub.cc\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sun, 17 Aug 2025 05:30:47 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-12T09:40:16.634291Z","times_seen":587014,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/bdthemes-element-pack-lite/assets/css/element-pack-siteb12bb12bb12b.css?ver=3.1.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/bdthemes-element-pack-lite/assets/css/element-pack-siteb12bb12bb12b.css?ver=3.1.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 27368\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27368,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27368), with no line terminators","md5":"7a41d886f4534c244d52d6ff64754fd9","sha1":"6667cf529b38a4947c17ffe76eb4212b3a7d78ec","sha256":"92fafde49dc49eb1507e857ad26c5e5aa819b8d7f9cf518629044802d2bc2f80","sha512":"9d486211a85bc7b07785cba67f8e3aaaa86fe6cbf95b7757e59c2108f585eaaeedc53fd184c5280ed9873df8972ca14f427fe416171a55d44aa0c9ab561b8283","ssdeep":"384:jV1VIVNVeVNVLH9IDhIKSISlIoZIAhjVDzhA9Us+CPXxjMvN/kU5GUSlEz//Kzz4:j3y/w/1H9gCdBrDyHETScU6cMcEj/","tlshash":"edc26244bf43303466574d1dd799962cea38bc83f5534cad63e29521c7eb8a8232e93e","first_seen":"2023-11-26T16:49:08Z","last_seen":"2026-04-16T23:48:48.711297Z","times_seen":5,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":201,"dns":7,"connect":103,"send":0,"wait":216,"receive":24,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/bdthemes-prime-slider-lite/assets/css/prime-slider-site0a100a100a10.css?ver=1.14.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/bdthemes-prime-slider-lite/assets/css/prime-slider-site0a100a100a10.css?ver=1.14.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:34 GMT\r\nContent-Type: text/css\r\nContent-Length: 6686\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6686,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6686), with no line terminators","md5":"e46d6f812f2b706fcb502020036ab837","sha1":"3a5f0af80205d5c30dc2aec807e999326bdbcf1d","sha256":"4fc28ecba6f310bdbc12265016ff51c7b2a557ab3f0ea7d27dcc76590abb00df","sha512":"8646366f697f73c6d98b9f2ff785b891263776b73287d354376ace6d424892e0d5f1e5941a22f62659047730c7be6412e39d0188472a6f0a47b81984b5dba6d9","ssdeep":"192:Z7lRi0i2tiUtiIimiIiqibiQi4i+i2iiid4EidbidG0idxidKidNidwHiddid4yW:Z7lRi0iUiUtiIimiIiqibiQi4i+i2iib","tlshash":"b5d19d085da33828b033442dc7e15f3d89785b11731689aee1fa967e83e7487671af1c","first_seen":"2023-05-08T10:23:20Z","last_seen":"2026-08-07T11:23:32.953329Z","times_seen":71,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/js/webpack.runtime.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/js/webpack.runtime.min3d363d363d36.js?ver=3.3.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 4769\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4769,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4730)","md5":"e0efe313362be5e87fe4baf5a1e598b0","sha1":"6e08c0dc800b06e017c25706a8e3fea6c9baaa2f","sha256":"6e46b1ca12ff39f3ff3f8da5bf691cc03e9e896c9eeb20685e98d622eebfdcc7","sha512":"4df43b0a717b0920bb7018a28a004dfd38a254a7365763ca6bf4d19efcea7045f6448daf1e83cd43d6b750b833e0a401027a97d410f465f0d7b6e47f78db665f","ssdeep":"96:BVqHQS4KssNDNxRLGR/lXlueGV1fssVv4efnQeK/CcJUb:jqwS4kBdLqNzGvl+GW/ab","tlshash":"21a12ee51b90fc2b71f135c5e51a6730662fc0233d16bcc2ea29dcd955e4ed183aa931","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-02T21:01:12.850072Z","times_seen":419,"resource_available":true,"data":null}},"time_used":1051,"timings":{"blocked":934,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/themes/hello-elementor/style.min806680668066.css?ver=2.4.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/themes/hello-elementor/style.min806680668066.css?ver=2.4.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 6687\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6687,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5856)","md5":"4c043032bcd9f646ab2bfb2339f8ae43","sha1":"a31be470013aa35785f5548857f52ad63a9ee74b","sha256":"c2e0a0df734b5dd7c9f1140f903bda4d949c8f29f64963fb6f8bf84296566656","sha512":"154f09cdcd91b23ba5f26a627bb6dbe392cdaca4062713c5e20281a17ab2c20555620ce38df689891119ed7418cf4449a58537fb135bdd349d65d473c24fb070","ssdeep":"192:BohjwJOKmofoyHh9D6VKZBG9HhUXEtOkehiIj:4hGoyHPyrK","tlshash":"ded19663970031557233c9393ac27e887a126221c4731bf4f5169dfccbca8675a69f9e","first_seen":"2023-04-14T02:13:52Z","last_seen":"2026-08-06T04:12:19.122305Z","times_seen":803,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":216,"dns":2,"connect":113,"send":0,"wait":120,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/thumbs/Logo_kingsley-pav84691l3e5c99ilnp4hjwi47kkm05zgqke30v6rk.png","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/elementor/thumbs/Logo_kingsley-pav84691l3e5c99ilnp4hjwi47kkm05zgqke30v6rk.png HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: image/png\r\nContent-Length: 48044\r\nConnection: keep-alive\r\nLast-Modified: Mon, 24 Apr 2023 14:06:16 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2084 x 757, 8-bit/color RGBA, non-interlaced","md5":"b46b1c8472e19cc2b8a1c81266265596","sha1":"0dcaabd9e615f73a21fb08a387a06ea6529fd95d","sha256":"50bae5b9b2b0fc3fe7d97f46195465e92b8260c558171236022a4c9ce610b6f8","sha512":"7ee8c9693e6d51490c84b90ec6ec62470e2072094f3d8cb22d0ccbea5b29bee820da9b99b626592ab708310e9feb0d2a2d7fbf33b18cec80a9647d97176a4059","ssdeep":"768:7N9Ex7fYzF/HJ7I+aJa0aTCGQfkK8DVupRWFfa74lVuKcBuXy9q2nn:sx7wzFvJ7t0aQfkK8JIW1MmuKYc2n","tlshash":"2d23d00be00d451dd87cd1bdc668efc037665ad944aabbc88371f678bee838c9871894","first_seen":"2025-08-17T05:31:05.038355Z","last_seen":"2025-08-17T05:31:05.038355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1637,"timings":{"blocked":1523,"dns":0,"connect":0,"send":0,"wait":112,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/2021/07/3.jpg","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/2021/07/3.jpg HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3446\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3446,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3","md5":"77f0096cec7d16c7e4cc0b4b2a8fcf7b","sha1":"223ebfc3314509f1aa37d521694ea70f23d20965","sha256":"a9c317530326e3fa8c8e792731c78cddfd6b91184bc68652ba59cdd3f334dff0","sha512":"b38816ec85ed303dbf660baca9c1b0fa03007dfb2e5524951cafe4a8b4ef0b2dbd53f6c0e8373a5a17c7bcc4b9391db7029d75bbacbbd98e9148ccf2d4367ffa","ssdeep":"","tlshash":"86614d4b332de886cd6c6c30287a55d5b704fe4785ad732bd79d4073b811ea2514e303","first_seen":"2024-08-19T18:57:27.815759Z","last_seen":"2026-07-27T06:35:58.137296Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1637,"timings":{"blocked":1526,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/kingsley/wp-content/uploads/sites/56/2021/07/office-workplace-table.jpg","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /kingsley/wp-content/uploads/sites/56/2021/07/office-workplace-table.jpg HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/css/post-6567cc37cc37cc3.css?ver=1627820955\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/2021/07/two-busines-partners-men-in-the-office-e1627827569195.jpg","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/2021/07/two-busines-partners-men-in-the-office-e1627827569195.jpg HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 98156\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98156,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1260x710, components 3","md5":"da1b0d391fa1fd8d331fd590de88ae81","sha1":"a1530493ff9f9f156a967de78d50499f4f892cbd","sha256":"1caa50744d0bb3291b64c8f5b06efe6ef73c572ab5fe0ad4b910e89f8b653d55","sha512":"2a6414ad5defe31756aa58c8308d37a778cf7ee6f061ff5406f830454e60c5c0086c8e93365617afd22393e4ecdc94932c75c64b9aaefca64141632555d79df0","ssdeep":"1536:OcsrQ1sgzGl4YGrHd7/8QeMS9zasZKH6PL/H48bvRa05iHM2awZjfO/cwPtXw:lgl5Gr9ghpYaPjHBtr5iHxnlfScyXw","tlshash":"61a30213eb9121abca3e3f3ee63584914e1b49767a345379c018ed2fedbada40f01954","first_seen":"2025-03-08T23:03:59.266835Z","last_seen":"2025-11-23T04:11:58.632556Z","times_seen":4,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1755255284","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:38.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1755255284 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 284114\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"689df785-455d2\"\r\nlast-modified: Thu, 14 Aug 2025 14:49:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-16T10:57:50+00:00\r\nx-node: m9p-up-gc58\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1205075,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"d126580a1892ca7d2b126b41ce8e7249","sha1":"efd5f5baf84394e95827806682e91c0de0209a34","sha256":"8004c224ecb21ee42d7860aa01e93393e8adb4c40334ad8e1dcb885dbf03d8db","sha512":"642a61427858acfbf77fea81cd1c92e08bf268ea5b30822cff312b098e4c59991c8530d0a58a498d1ee0d4bd503955988953898bb5f96718f4bf0d03209c55ab","ssdeep":"24576:BVSwSo6xbB0mjHeYoyuWFCmSQsVduyE4dD1ebzb5oVvUfLu+tj+WLy:zSH0mj+YoyuWFCHQaQ+d5ebzb5otUfLm","tlshash":"3f254ac5b1c0f4a502d355e6643b2009f23a285e7809b064fbbccddbea5659e6273f39","first_seen":"2025-08-15T12:37:28.305959Z","last_seen":"2025-08-20T05:24:19.187143Z","times_seen":76,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T05:30:30.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0\nPHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3; path=/; domain=gemstonetradehub.cc; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":178675,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1285)","md5":"ed501be3705558d940b94e1cc1fd6e40","sha1":"ddf333dbcdef3191bd962167a32a937a66ee21af","sha256":"b5b446d2848258174833357965bce2ce9e0f2cf6820238aa6313a288cf5aa112","sha512":"a8fda886c1b5c87417b82d96f3ab6714f77c51a14faff3a109720bf6c4db01d4c30976899232a7879605568706fdd17316a400b260c5fa2a1f4bf8daec3cd75c","ssdeep":"3072:Wdzet2TnB0ubGzy0SASjaBa7P+FCxEkOGxenUE7vLoet4duvhApk6q6c:WdzeUTKRzy0SASjaBa7PS","tlshash":"2104f9207af20232109f309f9317171d6ad3d787d2966bf471bc82a89fb5e817e93598","first_seen":"2025-08-17T05:31:05.044749Z","last_seen":"2025-08-17T05:31:05.044749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4727,"timings":{"blocked":367,"dns":155,"connect":100,"send":0,"wait":3676,"receive":316,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/js/frontend.minee9aee9aee9a.js?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor-pro/assets/js/frontend.minee9aee9aee9a.js?ver=3.2.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 57125\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57125,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57080)","md5":"cda664dc6f8021f3a97f8f8bc7e945bd","sha1":"76e8f6c2632b5d564039411ef3e0b02ca8fd0982","sha256":"12ab3055558fe541bbd70df670dfeaa2f778cc13cd1074b7c5e79ed1a20f86ac","sha512":"5d4bba91cb2542325f18db370142651cf0dc069f825627459892c3f2e20c727d1ff657d1963750fbe068816c8146e01328d2d18dbb907b04588e413d8b60245e","ssdeep":"1536:bNuVONnQ51H6PHh6PIZaKOleNjb7YzJcDXRuHiqVnb/Q4:bYONQj/f","tlshash":"2c43e98a3092f4a213eb9265502f000bb3771ca8688de590b775d8f1fdba85d7167b3d","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.270971Z","times_seen":342,"resource_available":true,"data":null}},"time_used":1246,"timings":{"blocked":1138,"dns":0,"connect":0,"send":0,"wait":106,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:36 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-ray: 9706c7ca5949b4f7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 77472\r\nexpires: Fri, 07 Aug 2026 05:30:36 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3eOFyaixttXQpFPjq2UncRcs%2BQGgT25Y8vEDotzamVBQKb2EKym4gZ2V9Su%2F90SUvZnKxqkY45N7WGs42wqvhTGGT46xfO6ohYzFVO0TNSpj1YP8nvrl15S3O6qNop3NQtor6%2BMb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-12T08:47:02.259699Z","times_seen":45147,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/thumbs/Logo_kingsley-pav84691l3e18xsnqfyms4qi1fvqctrqy1gtofk740.png","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/elementor/thumbs/Logo_kingsley-pav84691l3e18xsnqfyms4qi1fvqctrqy1gtofk740.png HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: image/png\r\nContent-Length: 48044\r\nConnection: keep-alive\r\nLast-Modified: Mon, 24 Apr 2023 14:05:27 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2084 x 757, 8-bit/color RGBA, non-interlaced","md5":"b46b1c8472e19cc2b8a1c81266265596","sha1":"0dcaabd9e615f73a21fb08a387a06ea6529fd95d","sha256":"50bae5b9b2b0fc3fe7d97f46195465e92b8260c558171236022a4c9ce610b6f8","sha512":"7ee8c9693e6d51490c84b90ec6ec62470e2072094f3d8cb22d0ccbea5b29bee820da9b99b626592ab708310e9feb0d2a2d7fbf33b18cec80a9647d97176a4059","ssdeep":"768:7N9Ex7fYzF/HJ7I+aJa0aTCGQfkK8DVupRWFfa74lVuKcBuXy9q2nn:sx7wzFvJ7t0aQfkK8JIW1MmuKYc2n","tlshash":"2d23d00be00d451dd87cd1bdc668efc037665ad944aabbc88371f678bee838c9871894","first_seen":"2025-08-17T05:31:05.038355Z","last_seen":"2025-08-17T05:31:05.038355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1643,"timings":{"blocked":1532,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:37:47 GMT\r\nexpires: Fri, 14 Aug 2026 10:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 240769\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T09:34:45.189447Z","times_seen":257164,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":150,"dns":5,"connect":9,"send":0,"wait":8,"receive":2,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/thumbs/favicon.png","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/elementor/thumbs/favicon.png HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 6832\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Sep 2022 02:26:18 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6832,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"248b2a0c9fecc9e6f9c5ec84227585f3","sha1":"e12d260873dc661099bf24cba4a0bfd475ea2ccc","sha256":"191488b9528d03f7f34a9933def7fab8977d48569e015b6bbf10c50bb2c35028","sha512":"4f62e07054c936ce73048f703cb5186ba241ace4f02a8b7ff0c5b1829f58694be125ee6800f71207de727b8efdc2182ebdda381c4a86c8aaf4559d452e6806e3","ssdeep":"192:6SOkn5d46jC3qVT13C5PGqCGOH/38WuRtk9UXIB:1ln5dfjxH38XCf/38WuR7Xa","tlshash":"8de18c283d206e95e988f2414dfa600e2b738fcadd02e8613ce98e2753114b5ea8d4d9","first_seen":"2025-08-17T05:31:05.050266Z","last_seen":"2025-08-17T05:31:05.050266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/themes/hello-elementor/theme.min806680668066.css?ver=2.4.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/themes/hello-elementor/theme.min806680668066.css?ver=2.4.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 15164\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15164), with no line terminators","md5":"b81597c6fbe02f39682910dac2fd4824","sha1":"ec10802c841c2f251d85e91efa5926eb3324564d","sha256":"9ee09652280b56db59db015c319a6a6b80e1e161a8a0b703207e1a59b4c4e3a8","sha512":"dd1bf1dbf57e7bb814a4db3bf14c673f39e2a5b11f4c10736ba3f17598a775172c0b5083c6a14d7ab98c4b4a6cf6b7f118be33680d2286eab905250695682bbd","ssdeep":"96:UdyBxTAlMv1vu582yhjFobxS6PF3fcwyT14I1Ioo5zZvAeMwSl6ZsY32FzI700vv:7BvgHJxU2Iyoo5zrbmI0ifEzeAAu6","tlshash":"fc62312bf8e1323c02378a12a7d4579e5079c11ed50757fa6aead30b83c7a411ba374e","first_seen":"2023-04-07T09:27:27Z","last_seen":"2026-08-10T10:16:03.117713Z","times_seen":1093,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":214,"dns":2,"connect":109,"send":0,"wait":204,"receive":1,"ssl":121},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/video/video4.mp4","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/video/video4.mp4 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 3035467\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-3035466/3035467\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":884470,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"0f10a56f6cd6250fc2ec042f6f544fc6","sha1":"dd15f22441d20bef3379412ff9d5c670cd5053ec","sha256":"4d82906c4824ae214facfced8124e0dfe6b17817082a968fe2b6418479c8b908","sha512":"be35e34c2791616fb6b15d41df2b82e9d045b87c71b009d7797e23a1b55ab78447d549f76fddc8daadfea58c7ee07b4ac60281e7d08b1d2f2abdf6e4a0f89ab8","ssdeep":"24576:wbkh8BIZTNNQdO5+ohrRKnyo1BnSwYsgFAAH4GB+:vvZTcWxrRxonPYNYy+","tlshash":"26152324b3ea701bf47c133059ef879e22b1e3bea6831b177591a2644c4aad22dd15e1","first_seen":"2025-08-17T05:31:05.053856Z","last_seen":"2025-08-17T05:31:05.053856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:51:05 GMT\r\nexpires: Fri, 14 Aug 2026 10:51:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 239972\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-12T09:13:55.333374Z","times_seen":79622,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/temp/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:37 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-includes/js/wp-embed.min41a341a341a3.js?ver=5.8","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-includes/js/wp-embed.min41a341a341a3.js?ver=5.8 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1426\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"905225d5711b559d3092387d5ffbedbd","sha1":"6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d","sha256":"5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991","sha512":"5ad34cf11acf45ae256b2641496be13939cd5e0212810c43ab20cadbb313a1d99cb3a451148e160d80f1f952a8514480c2953bc6ca0c4697a466a01e1c3d5f8d","ssdeep":"","tlshash":"5c21522a3228943758db11d3bc4535cad2e11fed681215d20e38cc49eae4e935969fe0","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-08-12T09:44:02.574675Z","times_seen":5650,"resource_available":true,"data":null}},"time_used":963,"timings":{"blocked":818,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-includes/js/jquery/ui/core.min35d035d035d0.js?ver=1.12.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-includes/js/jquery/ui/core.min35d035d035d0.js?ver=1.12.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 20787\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20787,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7973)","md5":"49fa677b9cd7ddf221dc06537b35e10f","sha1":"7485f3f99c3c1a57197f2b099f3f8d68b8609d06","sha256":"0cd851e5b33af0fbb354df65506da39807b998e07723f3d08aba5179fa2ed97e","sha512":"40d50c965db656d352c1e73bf3ff9e82b64422398974d55902b0eaab213ff255af9338c33d09a8b148da37b1a13ef0377de2b510f6b5c7c42c8f866ba3189a54","ssdeep":"384:8uMSX9vEqkTVScdV/vWxcHsiW58furhDGXvhHQfww/Xc2S8mFkF50y:iScPy+hkLqkJ","tlshash":"d692e68db2453815c5f79265403f935fa132e29cb10a889df4bcc9e92c7ae992073f78","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-08-12T03:00:41.003129Z","times_seen":5656,"resource_available":true,"data":null}},"time_used":1058,"timings":{"blocked":944,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/bdthemes-element-pack-lite/assets/js/element-pack-site.minb12bb12bb12b.js?ver=3.1.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/bdthemes-element-pack-lite/assets/js/element-pack-site.minb12bb12bb12b.js?ver=3.1.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 99705\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99705,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0bbe312efeca944176b9601e7a980f76","sha1":"c26e85c30d3707d53edbd35fe0879e07a8a2b5ed","sha256":"2e00d48f9b228868eea534d16cfaeed7a20d79139a8b05ad8086c76ab562cb4b","sha512":"d784b1e712039eec82ff66e386b5390ac090ac89a638310faadf95759c1ef6c0e5e72de92c5954d8413b108d3accd9296c1cc7754c0d3cf2a581efd1546326aa","ssdeep":"1536:ObhKZ19HN04TC3I0VH2iSK1q+OFawxu3Y2JiTLbM:ObSjOk+IkYJI","tlshash":"5aa39558b60a70e921bba137d36f361c603299b9b8025095b07690f45dfefe8331bf59","first_seen":"2023-04-22T04:53:03Z","last_seen":"2026-08-03T23:31:31.228981Z","times_seen":36,"resource_available":true,"data":null}},"time_used":1156,"timings":{"blocked":1045,"dns":0,"connect":0,"send":0,"wait":107,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v4-font-face.min.css?token=a7077a5c05","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:35.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v4-font-face.min.css?token=a7077a5c05 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemstonetradehub.cc/\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:35 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"3e20aa01a74cb21290faa04e29684ce4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 0FxvzCHmrHM-C8LUo0B_Ts3mJrmgF9CEVllPcnuWBM8lFv1dqYHmgA==\r\nage: 5288657\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sal6%2BWJaKJKDNOqAiyGEodmoLJrlafG6a0Xc%2Ffzm2lysdBKfhPZAhXvGvSg9QkaXYzA0wbfe4J8mY8Iak1K8LIY4Rz2UIJ5WUWzYvizJw3V3zw%3D%3D\"}]}\r\ncf-ray: 9706c7c38dc1b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1775,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1560)","md5":"3e20aa01a74cb21290faa04e29684ce4","sha1":"9279c7200c52d95369427e5a9dd013a327e4c8b3","sha256":"e855bc2e1c23e76ebb884cb182a037c64af2cacc49eac782dd43fa0454ee1f27","sha512":"22dbdda00c128ae18ee4f2c09d6d2316bfacc58fea0749207905cdcad0fe1c3725754200d9182916d3e08e2a333c15de9d8f143fcdc482ead539fef21ccbb147","ssdeep":"","tlshash":"2231f02846d401b0b0313f193ac77125eeae74669bb95e63d62b88140dfec55f3d5f48","first_seen":"2025-04-07T02:17:37.738288Z","last_seen":"2026-08-11T20:54:12.037177Z","times_seen":6885,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:37:47 GMT\r\nexpires: Fri, 14 Aug 2026 10:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 240769\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T09:34:45.189447Z","times_seen":257164,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/temp/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:38 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles25b625b625b6.css?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles25b625b625b6.css?ver=2.3.5 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 442272\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":442272,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"8bfde93a34c53b6667358d8dacbe5d0d","sha1":"9d1bf118fbc0eae905260c1a6412b4de5eaf4711","sha256":"10d65f81219f87654314e439b88d65f881db7d20331be8f88b349c9aa443065f","sha512":"0ca57298c6eb98731febfc5b9f6c1381a1fc2756eea11fb13ec6075edd80084e2e66fb6564b32809100044d49543d63c420d345566b6ba73ded507223fab8397","ssdeep":"3072:AL1ENgZQwU0HrofOVfjhWpGphoGhu7fefN:AL1EwQwU0HkfOVfjhWpGphoGhkfefN","tlshash":"ee9463526c923248513f8e1f93dd9a5c1728c193e4630ddeb6c26c1bc74aebd72ea607","first_seen":"2025-08-17T05:31:05.061642Z","last_seen":"2026-04-16T23:48:48.75834Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":517,"dns":0,"connect":0,"send":0,"wait":116,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/share-link/share-link.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/lib/share-link/share-link.min3d363d363d36.js?ver=3.3.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2578\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2578,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2577)","md5":"9bb8540493a7fe11b229870eb37be165","sha1":"d77f17cb9057dc8f622b8c0bf23f6acb739b3b8e","sha256":"4a7ee62eb33f3bbb66c2151e5cac6bf4904e28302efc36128f3e3ccae6fde580","sha512":"fb245059108ee476bfbca60a96d401c2796ee44b646e0874d41b5fdb1204a66e3bec6a4ab8e155e50489b3adf48bd609683b3d1c020b9f39d084a915f8377773","ssdeep":"","tlshash":"035114e77b54e81707427472705b7b6ce3330405e9cac496c1a0b9a21f78697753da58","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-08-12T07:59:56.777753Z","times_seen":8405,"resource_available":true,"data":null}},"time_used":1060,"timings":{"blocked":960,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/js/frontend.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/js/frontend.min3d363d363d36.js?ver=3.3.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 68177\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68177,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65497)","md5":"a57515d96bc03b5676a8f95a75a2d958","sha1":"bba62799d460ae14e96f5a51d57d44f1779b3f28","sha256":"f66a12b374f51d5ff9b6b578b651b27a5eb0ee168ac53f796f3a90b7ef630a93","sha512":"ba7ad353afe66a95a01ab1681ceebd3b8270e934c5c66205c3df1f6ea37084653397f5c965b17fbdd2d288ebd8394c8b1913094a2cd03900faaaa61e9a6da273","ssdeep":"1536:2GItqmLG0VtVb9rqI1xz8SUQ3SeC5aBUviDZWtZwJSI/fY9N+qDxc1C9yUtg7RmT:7IL6dNOhlZk","tlshash":"01632a9831c3f06582d7a579602f110ea2761da88489f154b13adce1aeb5e6d7333fb8","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-02T21:01:12.833999Z","times_seen":408,"resource_available":true,"data":null}},"time_used":1142,"timings":{"blocked":1041,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:37 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=gMA/d=0/rs=AN8SPfoT-dXTdPTRYQlo91QfUWPUz7dIvA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 Aug 2025 08:35:25 GMT\r\nexpires: Sun, 16 Aug 2026 08:35:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 75312\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-12T09:13:55.236381Z","times_seen":74631,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.5SD_KrlRKpI.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfq3iOuaNx-y01xXGDCkYtjOWUDvFw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.5SD_KrlRKpI.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfq3iOuaNx-y01xXGDCkYtjOWUDvFw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 76789\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 18:59:04 GMT\r\nexpires: Fri, 14 Aug 2026 18:59:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 13 Aug 2025 13:10:58 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 210693\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":222140,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2544)","md5":"350c5e2cd2d9677a96f4c2847fb11f58","sha1":"46f29b46270d52f1860be04b9a66c440cb2c04fd","sha256":"c52a1f82550c424bcc64bf4856385562e11debb40e36bca40ec7d0c4048ac1eb","sha512":"812889353fb79a6e09cc72e0c96115b666d8bf6a647cf293884fbdc398d43b16ae54f6b0e7926c6562f2d490cc762870a4e067ceb0c3c5393eef82f376c2720f","ssdeep":"3072:ZzFV9KRr8lAgEaVyLZMrJUeCqVPJJjN8aZxu/9rjDP+ae+rYm6u:JPAgEaJ3YUu","tlshash":"b524d8d9b39270669363f4a6917f000bb13b5869f9484dacb28de8e25ef48190177f7c","first_seen":"2025-08-11T19:49:47.511594Z","last_seen":"2026-02-24T05:09:45.783207Z","times_seen":1065,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":38,"dns":3,"connect":7,"send":0,"wait":8,"receive":15,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/a7077a5c05.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Jun 2025 16:08:07 GMT","end":"Wed, 24 Sep 2025 17:08:04 GMT"},"fingerprint":{"sha1":"58:07:BB:90:43:B8:FF:88:FA:51:6D:25:62:12:3F:F1:6D:EA:C6:64","sha256":"77:55:3D:59:A9:BC:75:44:9E:AD:FE:D1:45:D4:FE:D8:CD:71:E2:22:16:C8:40:CA:A7:13:01:C6:08:91:EB:CA"}}},"request":{"raw":"GET /a7077a5c05.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:35 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=60, public, stale-while-revalidate=30\r\nvary: origin, accept-encoding, access-control-request-headers, access-control-request-method\r\nx-request-id: GFdSONJQhcuHwdXLJp5h\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9706c7beef015694-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14876,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14413)","md5":"6d86aff5e9ccc8d5a03e22792236b18d","sha1":"13298c09306e54dabb162ca18048da36ff574505","sha256":"46383ab22e429060436132b728a3b249782ca5c3e369e0db402121ff114457c1","sha512":"94af02964f4dc4682364e8194430b90ccdc1f9940dc19835cce0b4aad3471f81699a578335bf6dbe22db6b82d68f5763d4855b8438009f478dd36746e574f712","ssdeep":"192:ukGliHAgFqICpzpV2chiHCpgeM/ZhnlD5Nu2ExDQZZuC4PvMxDyNafVvh3uYXylz:ukKmCNwCaZhln20MFG1h3uYXyl8Y1eK","tlshash":"3862e75d7a81b47a86af7192843f670fb279343b30129420e25dd9e4acbcd5ea123f1d","first_seen":"2025-08-17T05:31:05.067963Z","last_seen":"2025-08-17T05:31:05.067963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":22,"dns":2,"connect":1,"send":0,"wait":470,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/elementor-pro/assets/css/frontend.minee9aee9aee9a.css?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/elementor-pro/assets/css/frontend.minee9aee9aee9a.css?ver=3.2.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 210882\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210882,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65493)","md5":"9943e6b1b94f179c4137136554c4d4de","sha1":"e3406d7926727d7e9ba894a6db838c896f70f226","sha256":"68e46d074d88c5b45f552e28c2449f8361a2036b2767ea459f2c941aa6a43eba","sha512":"b330577eb4c50c42520dfc2ac3134836f2833bb0390dfbb3ff05ccff13b2d4a29cf2e4d548d48da853f7709f118b504b8dbfbb41ec70e3318c2034d432fb6bfc","ssdeep":"1536:TYMp3bC2HuQYqUlwpR0/srS8rwkJkmkukxkOkNkekvkF:4zqRIsrSe5","tlshash":"632476b2fc23111d512f593b93c7a28c2a68c4c5a55126eefc62650b87f7d98337a70b","first_seen":"2023-04-11T09:28:09Z","last_seen":"2026-08-03T23:31:31.32009Z","times_seen":300,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":350,"dns":0,"connect":0,"send":0,"wait":212,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor25b625b625b6.js?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:35.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor25b625b625b6.js?ver=2.3.5 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 14778\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14778,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14778), with no line terminators","md5":"2cfe6c73ccf0a8f2e4566818f1af8f0e","sha1":"c25035282d2c718cd1acbb04276328411e14ebe6","sha256":"0159c7d88a5475d3596e530aea480d6a7f5b1a4259b02111a64d13c7a79c2c44","sha512":"efa73ec8da3916204005ac6693900a269941ebafe155b5b8b782317a73dd0acbc5a43a8362815ff469c17cc8d45606b8eefa62c1922937c3b54715aef00d0745","ssdeep":"384:FsCKj/IfE4AoCifSM2JxrDB5evnmcK/B6fPlaByRNCyyBN3+yrNoYy7NKSFyDCy0:FsCKj/IfE4AoCifSM2JxrDB5ePmcK/Mb","tlshash":"eb627368b191306215bf64ab53af131f73f35469d9474020b2b642ba8ffec44389ee1b","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.253332Z","times_seen":204,"resource_available":true,"data":null}},"time_used":1252,"timings":{"blocked":1150,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-includes/js/jquery/jquery.minaf6caf6caf6c.js?ver=3.6.0","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-includes/js/jquery/jquery.minaf6caf6caf6c.js?ver=3.6.0 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 89521\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89521,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"02dd5d04add4759122013c5ab4dc5cc2","sha1":"a45a56e396ac549b4ff39b696ce9e0c16a7612de","sha256":"bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea","sha512":"04690d9875e98f5ae6bf94f5c71b7a0177b374bc09609a0f58312e1c337348749a40e07fe226737dc248bd8fe2f6a489071258619affc7f1df644e4255159615","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e99309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-12T09:44:02.629808Z","times_seen":60293,"resource_available":true,"data":null}},"time_used":900,"timings":{"blocked":739,"dns":0,"connect":0,"send":0,"wait":156,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/template-kit-export/public/assets/css/template-kit-export-public.min9f349f349f34.css?ver=1.0.20","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/template-kit-export/public/assets/css/template-kit-export-public.min9f349f349f34.css?ver=1.0.20 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 1111\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (303)","md5":"4ee432d2ea3aac0ac9d01136c784b46b","sha1":"48ba2c95fd24b12d388ec27a79536add8ec639b1","sha256":"1c2665008fa6f6c15056deef5134ca42043ac7df2fc20bb37d5268afafe1bd25","sha512":"3893c355f70a5581238b11c9f6c1d4724c3c3eeccc1cac5f0497ff5fbb5a7ff3382fca467712d69e33166b08d77e79452207c6a60964a19f9dcdfc4584df4705","ssdeep":"","tlshash":"1d211eb30d82a3116637c924f7e49485e4b58c396b811bd3d9e3ea2acf17c6f0978646","first_seen":"2023-07-08T02:54:03Z","last_seen":"2026-08-10T03:20:17.612454Z","times_seen":244,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":206,"dns":6,"connect":105,"send":0,"wait":167,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (964)","md5":"325ced3c43af3dcf4b8db24bf21d1875","sha1":"855e8d005b0f40fcd9cadd597d068947d5d10627","sha256":"8db4ccdc10593487ff020b457eb87508f472ceb34b63c89681e291f29e0eb271","sha512":"dc0baf5cb6d3ed460bf146173eb0759b6b043d1db18fdc7a2db235516828218c5b2dd097d50164922d0cf81b2f1ba5fbe5c18dc6be21d0ee814725924cc4f901","ssdeep":"","tlshash":"5f213b3a053a365020995a032492be899f84be817f445f36b12dd9bc98e5e1a63b1f60","first_seen":"2023-11-26T16:49:08Z","last_seen":"2026-04-16T23:48:48.761522Z","times_seen":4,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":736,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/mFg0ggm4CC","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/mFg0ggm4CC HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:37 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 682\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Sun, 17 Aug 2025 07:30:37 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc53\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1336,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"a5505be4382097cc683ca800441be94c","sha1":"5772f0240ce3583e7446b0bf73bab444a7aa432e","sha256":"e6ce4f89aa4e7804bc8f44ccc75b229ec8b0362519c6ab8136d5043d79fd7f79","sha512":"8586e047a0db9aa072fa5966f97fe650cf98cab5762b29f5fc82ae75979282a155ab7fc227107ad3b7a67821045d6d53f001a3db721e21d0bb5ea5c669453968","ssdeep":"","tlshash":"c72115a20d5c543309857ec7622bee03243c86a6eec14f75db946d2c20973d5131f74b","first_seen":"2025-08-17T05:31:05.074448Z","last_seen":"2025-08-17T05:31:05.074448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":140,"dns":1,"connect":71,"send":0,"wait":146,"receive":15,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/themes/hello-elementor/assets/js/hello-frontend.min8a548a548a54.js?ver=1.0.0","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/themes/hello-elementor/assets/js/hello-frontend.min8a548a548a54.js?ver=1.0.0 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3113\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3113,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3113), with no line terminators","md5":"991851ce021f42521a9b8c707500d731","sha1":"d3b7d0a28b0e6a7e0621f78b1ba440b52060cc9c","sha256":"bd29338c097619843470ad38187d0c1754d939b12fa755f4c11f9e53fd46b09f","sha512":"f26086ff2446bf76a1b89a701fa6ac2f88bb4976838a5a1f55cc7027b7df6b281aa1c803652daa32d4bfdd5ede44fd57de955dbc78c22a4423f8cdb16fed8997","ssdeep":"","tlshash":"2b510349b183a9f5176e917b6b2b540f719398de6000e0f4b239eace19b4c8073e3b75","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-08-09T20:06:19.082649Z","times_seen":1413,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":744,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/swiper/swiper.min48f548f548f5.js?ver=5.3.6","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/lib/swiper/swiper.min48f548f548f5.js?ver=5.3.6 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 139153\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139153,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"15bb2b8491fc7e84137d65f610e1685a","sha1":"cd76b70a5426893e9c022b9a75c50a7c1348e2d0","sha256":"b23f49f504faa32aac548b6662ffd64412f6738496fab8be38da46c5b7121804","sha512":"95c05110b29101c84df71c54172269f478d9cd14965b3de987613e11e0f1ccf01c1b7d2bf290d97ef11373f24dccd677f8710e1555d332903181f469d0f2b0bb","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgA:wxoo6desFshaKi+HgZsUOUTqiqM37ER","tlshash":"6dd3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-12T07:59:56.827104Z","times_seen":22795,"resource_available":true,"data":null}},"time_used":1068,"timings":{"blocked":955,"dns":0,"connect":0,"send":0,"wait":107,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/prime-slider-site.min0a100a100a10.js?ver=1.14.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/prime-slider-site.min0a100a100a10.js?ver=1.14.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1061\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1061), with no line terminators","md5":"98b6d4d9abe4b663b99c8cfbb424e20d","sha1":"e69a1e140db4fd23de6bb8dae468b79e666e302e","sha256":"516aacdbd6bb53bdb2e3e252442950a796ac789c2dbef61f1604ff4c80740a38","sha512":"ebe338d7b0cf3d99e1d8afdb871483ec3e9d2eb30bad889ff231aa2f0eb61d4231e29f1911f93365415876306cf9abf64e275bb46ec0679b8fb7e5f811f865c2","ssdeep":"","tlshash":"6311e739b4aae124500fb833d667ba7dcce3c6b560127582d6d040a96af9fe4314d345","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-07T11:23:32.940727Z","times_seen":90,"resource_available":true,"data":null}},"time_used":1149,"timings":{"blocked":1051,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=gMA/d=0/rs=AN8SPfoT-dXTdPTRYQlo91QfUWPUz7dIvA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=gMA/d=0/rs=AN8SPfoT-dXTdPTRYQlo91QfUWPUz7dIvA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 18:59:42 GMT\r\nexpires: Fri, 14 Aug 2026 18:59:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 22 May 2025 01:09:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 210654\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":67,"dns":4,"connect":23,"send":0,"wait":22,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.minb683b683b683.css?ver=5.12.0","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.minb683b683b683.css?ver=5.12.0 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 18099\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18099,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18053)","md5":"7b60c0bbbf5ba771c9ea97173973ae28","sha1":"dbba3d3af5761373e17b333b31d165080409b464","sha256":"6b546dea8cd6cf793a91205f188eff2041fcbef3901a3113b2e80e49dca96952","sha512":"95eb9766408a8c59e9ad316e4bfa011d7e0900f40f721e528e078cb81a6fa51f2630afe56202512d779da913f04b5b0c06bb78c90ac774038525dc1ed133c58c","ssdeep":"192:1sQJHzdO8XHGK+JRxSe6OSfNVsXZLUCpZETvebAmR+srfSbqkbQC4u/DUt:1sIHzdLmK+JRQcx5ZETGNREmk4F","tlshash":"c282eca4e02922c92bb1c403e3d0774e7449b921fec5cd59fa5ba51c2fe1693068af7d","first_seen":"2023-11-26T16:49:08Z","last_seen":"2026-04-16T23:48:48.829639Z","times_seen":5,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":322,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 17 Aug 2025 05:30:35 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78883,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1801)","md5":"2712aae70653a199ae2bc52ce8fdaa25","sha1":"a5b1fcf06b3aa5137512190b85282ea583d29791","sha256":"1ac203a85fd737d0880caae337721d1a99f53f3dd86ad6e576fa09c702245e5f","sha512":"10fe3cfce29e408be0ab7981d48a03751e1d7c0429cc4babd81afedec5888ec018dc4614058c4116e756fd036caad5a52fac057f38080076f78e06858b092c42","ssdeep":"1536:XH5OBUXAex+GUw2vCzFsgKbTiK/Hb321LcgumlL1HviOwNWum:XZLtzhKbTXmx1viFm","tlshash":"8973c8c8b6a674668267f5b5513f000fb23f5899e80c4cacb288d8e16eb5949413bf7d","first_seen":"2025-08-17T05:00:32.54181Z","last_seen":"2025-08-17T05:35:04.360206Z","times_seen":8,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":48,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.minee9aee9aee9a.js?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.minee9aee9aee9a.js?ver=3.2.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 6595\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6595), with no line terminators","md5":"e16a8821e5f099c3a619889ea7cf0399","sha1":"a38e0c736aaf0b019b29b63b00e68c1381502217","sha256":"a48dea362116d7516a2cf97066a32758d353760ee02dbf900ddff86b02a16473","sha512":"41cf1eabfcd3b4752ee9fd1a7e7f5719249053bcad871254a9d9821e016b40a2fbc29797dc14035cda01628fad879c2fda47337853219f31250b9c7020d43cfe","ssdeep":"192:y4C8yiXSZPQfaNkLjEMHJx8vqOS5Z3N71jgiqM1xocYjtCDIoiL3:y4xyiXSZPVNkvEMHf8itN71ciqM16c9k","tlshash":"41d13d09b340203dd5cea3bbd02b9b4e337b192894f4e6256878d5942c76d9234d3bee","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-08-12T07:59:56.927589Z","times_seen":6909,"resource_available":true,"data":null}},"time_used":1192,"timings":{"blocked":1060,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=gMA/d=0/rs=AN8SPfoT-dXTdPTRYQlo91QfUWPUz7dIvA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=gMA/d=0/rs=AN8SPfoT-dXTdPTRYQlo91QfUWPUz7dIvA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T09:40:46.068026Z","times_seen":17853067,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-includes/js/jquery/jquery-migrate.mind617d617d617.js?ver=3.3.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-includes/js/jquery/jquery-migrate.mind617d617d617.js?ver=3.3.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 11224\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11224,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-12T08:11:51.592781Z","times_seen":86667,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":737,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T09:40:46.068026Z","times_seen":17853067,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/3b6097d/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:38.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/3b6097d/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3383\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"689df785-d37\"\r\nlast-modified: Thu, 14 Aug 2025 14:49:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-16T10:58:01+00:00\r\nx-node: m9p-up-gc8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10482), with no line terminators","md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min9f349f349f34.js?ver=1.0.20","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min9f349f349f34.js?ver=1.0.20 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 7\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"749034f2041f637ed40dcd96f4fd9759","sha1":"0a03f9a53a588426d83008046d855089ac4c85de","sha256":"641991d00eeb0d50ac64f69ca705f8bdc72cb725a60c8d7f7ef5191cefd5a455","sha512":"6d0a3ec65f4a640cc8c48795cc5f6e3463c9a09c35cce0206f8c93c6e8ec936cef8a650df36d5ab6fd44c1b35b00acd09f972b7e8850962ca713c3a4c6904411","ssdeep":"","tlshash":"ed400000300c000c00303303c030030030000000000000000000000000000000000000","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-10T03:20:17.553995Z","times_seen":491,"resource_available":true,"data":null}},"time_used":915,"timings":{"blocked":814,"dns":0,"connect":0,"send":0,"wait":98,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:37:47 GMT\r\nexpires: Fri, 14 Aug 2026 10:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 240769\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T09:34:45.189447Z","times_seen":257164,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":77,"dns":3,"connect":10,"send":0,"wait":8,"receive":10,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /kingsley/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/temp/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:37 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive25b625b625b6.css?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive25b625b625b6.css?ver=2.3.5 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 30164\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30164), with no line terminators","md5":"5d4fe684a9920c5ffc149c7f06d89607","sha1":"e1b621a98dc49b30e3805e3241b005d79d614cdc","sha256":"9e9aeb61b02b2abce2d934772982b561a9f611149b68f452e871f89c2e1f3dcc","sha512":"3a1e04627ada43a1cedefc6a60eada14e3019859be9b4aeae6e71d12a8e02ede4ad5e52eabda9f42e14655f5b0126ee55839d0805c7640c1a5079e9d1bbe94e4","ssdeep":"768:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFSlNBc6vzv2vBe6izi2iBPB5BQzeE8r7v4:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFW","tlshash":"44d2221ee93b3699127d8c2e13a2588d3b8480dbd1c329f6ac82de16c79dd70797944f","first_seen":"2023-04-06T22:57:32Z","last_seen":"2026-08-07T04:36:37.719275Z","times_seen":278,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":540,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/2021/07/2.jpg","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/2021/07/2.jpg HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2663\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2663,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3","md5":"df542f1b38ffb3f3ed7fa2a5413f2e12","sha1":"1f504c5f0ad9a29dade461b9be9b5b0b5aea0540","sha256":"f539c567a7ca87e9f7b11251a4470d24126bd8bd7ae052f2a0f695f728706f86","sha512":"2ef44386b14830a4b66eec0db66c6fcb0799867b42adb30a2631edcd1f1f4d53b5357deddba44d03b762b30f89b21be1ca69e4dd06e519021c3633111dc22057","ssdeep":"","tlshash":"ac513bd7e777794ae03df9f70c941656d2046e02b68f0457f18b88b096432ce0f53a89","first_seen":"2024-08-19T18:57:27.816428Z","last_seen":"2026-07-27T06:35:58.110223Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1638,"timings":{"blocked":1528,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script25b625b625b6.js?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script25b625b625b6.js?ver=2.3.5 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 40\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-08-12T07:51:56.357661Z","times_seen":29778,"resource_available":true,"data":null}},"time_used":956,"timings":{"blocked":803,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/bdthemes-element-pack-lite/assets/js/bdt-uikit.minb12bb12bb12b.js?ver=3.1.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/bdthemes-element-pack-lite/assets/js/bdt-uikit.minb12bb12bb12b.js?ver=3.1.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 133873\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133873,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65442), with CRLF line terminators","md5":"d2f04cefbdf3fdff890a901ee9658a95","sha1":"da6a2fb47ccc6d59439ddecc25479afafc888c6d","sha256":"cd6abf5053ed4d54a862adc91f1a3a62117e22b53127d7ecadf1c7988b65b44b","sha512":"8d98bca1a371cbbd838226fc82c9bcaf8a11e4444dd387adab6cfde41aa0f60becc61b0bc018873f88255ea91fd310e7482caefeb994b2d45fd9b9ac738434c8","ssdeep":"1536:WuQJK1pUBnFqyE8wIeyHer5Rp238a3P34L3szMNoQygVcIBEVxt6alfspQbobH4m:ssBRpc8a3f4wgVcusacobY+3T","tlshash":"ebd3b5ceb3d5b05143a36171916f560bf23ba884790b4198f639e4ca7cb894da07be7c","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-08T20:38:40.269204Z","times_seen":136,"resource_available":true,"data":null}},"time_used":966,"timings":{"blocked":843,"dns":0,"connect":0,"send":0,"wait":115,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free.min.css?token=a7077a5c05","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:35.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v6.7.2/css/free.min.css?token=a7077a5c05 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemstonetradehub.cc/\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:35 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"14f5eecc946f901d192b02550e4dad67\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 193fe983778f7496cce206a132f2e55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: FkruGWlLVoV24nFNNxiCdxTtpunSwYXplr7d6_VcqGq82VQ5hHHhiw==\r\nage: 21025298\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPYjrCnYtrIkKYgWPJHA3Zq9GccIl420ePu809jTxjsJ7GwAe49vbZKbV8opJHfzsTkiHczxHmKNsCidRq9E4iXsX8GZ%2FzVgFbGP8C3uAAxkVw%3D%3D\"}]}\r\ncf-ray: 9706c7c38dbeb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"14f5eecc946f901d192b02550e4dad67","sha1":"45d6a10e09484d078cad37282708d611e19a06e6","sha256":"8f13446769cd1916cbbbdc2be7eb5be4b331bc7ef9ed8b799ecb4674e48095bf","sha512":"82e20fec5704c5784624775facba87c0c85893707e6905e44390ca6671b3a3e212a0bbf7161bf5c779aaefc22a71be24c38043d3077aedfd2e53483cde032072","ssdeep":"1536:/rM1MvMaMfMRQdm0grfT/QypZhzZHpSjA691Q:ilgrLXzZJg191Q","tlshash":"3f731f16ad84019bb4568d7f3885bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-18T04:50:29.606533Z","last_seen":"2026-08-11T20:54:12.050677Z","times_seen":7368,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.html","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.html HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/html\r\nContent-Length: 1610\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1610,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"9ee0d98e36d12c7a4a4a70d1f1f6433f","sha1":"660df5b40f46f0ac090f82bf3f4459791b1c70ab","sha256":"fa8bd6774bf4f95a31859d1eac041382b1c8da8ac71589932a368a1ff84edcf7","sha512":"e7e9f0ff5535809bdedabda359523a39d48053e5db39018593388080a875a04965d12ad5cb2ecbf515c2c462875537bf0592d0a3fb6535f831006b0b4823dfe6","ssdeep":"","tlshash":"b131862ad286466ad1134254fb80e7a42a288261b49a0ff1375e315ff9cc1f782973dc","first_seen":"2025-08-17T05:31:05.090875Z","last_seen":"2025-08-17T05:31:05.090875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":837,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d552d5.css?ver=5.15.3 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (964)","md5":"325ced3c43af3dcf4b8db24bf21d1875","sha1":"855e8d005b0f40fcd9cadd597d068947d5d10627","sha256":"8db4ccdc10593487ff020b457eb87508f472ceb34b63c89681e291f29e0eb271","sha512":"dc0baf5cb6d3ed460bf146173eb0759b6b043d1db18fdc7a2db235516828218c5b2dd097d50164922d0cf81b2f1ba5fbe5c18dc6be21d0ee814725924cc4f901","ssdeep":"","tlshash":"5f213b3a053a365020995a032492be899f84be817f445f36b12dd9bc98e5e1a63b1f60","first_seen":"2023-11-26T16:49:08Z","last_seen":"2026-04-16T23:48:48.761522Z","times_seen":4,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":729,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:39.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:39 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6899c524-16b0\"\r\nexpires: Thu, 11 Sep 2025 08:21:58 GMT\r\nlast-modified: Mon, 11 Aug 2025 10:25:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-12T08:21:58+00:00\r\nx-node: m9p-up-gc7\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.690188Z","times_seen":16742,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:47.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://gemstonetradehub.cc/\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://gemstonetradehub.cc\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 17 Aug 2025 05:30:47 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T09:40:46.068026Z","times_seen":17853067,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":48,"dns":1,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.minee9aee9aee9a.js?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.minee9aee9aee9a.js?ver=3.2.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 5536\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5536,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5493)","md5":"11e5a87bd531d53a58ddd15e491ddd82","sha1":"954201068d4d7d64e65e98287da3d10e995c6b8d","sha256":"f63f9da97a793227b906f8baf1ef3299ed5fa10ec94ad03f920a863c613dce1e","sha512":"91318f41eabb23fe1d31894ae5d198022b74818bbadef3becb2b580871b63b2f2f871adc8b6fc3632cd4a4239ef36e58b06642ec2f778286540380b93736669c","ssdeep":"96:Bs4JxUTSq5wScUX8VGJGoPT4VELXlUN3cAVibV0GQKZ+ftpadfbHtp:64JqTSywSaVgGoLEELBAmCdKZms7P","tlshash":"23b142d41a90fd2732e139d5e15b67712a2ec0333d26b9c1fa25dcec54e8ed083aa971","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.220352Z","times_seen":339,"resource_available":true,"data":null}},"time_used":1165,"timings":{"blocked":1054,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:00:44 GMT\r\nexpires: Fri, 14 Aug 2026 10:00:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 242993\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-12T09:13:55.273915Z","times_seen":57072,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-solid-900.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-solid-900.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:37 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158212\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\netag: \"0931d657c03a7e21f461178758aa2e19\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0091ee978574700d165730d7f2557c34.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 5PKQT6bXBPfXPAVnabKpfnTGl2nw5qa8Xt5leis3A6HLQUjHo-W4tQ==\r\nage: 10739263\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hIlxT%2F%2BzvhL65btUmxF5Cqv5%2Bo6uBjI2YCNbNy9VDep8TS3lj4tJVB9JnQDVAtHFtL6c4GCG9Xa9neR44Oej%2FD%2BiZRO2yOC0TVc1oHphIXjt6w%3D%3D\"}]}\r\ncf-ray: 9706c7d0dd1fb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":158212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158212, version 775.1280","md5":"0931d657c03a7e21f461178758aa2e19","sha1":"0dc7d1527ac7015ec4db478ed1bde56b64fdcde0","sha256":"95e971e60878307902a92bc76c5d5e54bdd040e68834ac0b332f59526c68b1b3","sha512":"736674c3ec882e86ab16f6618a5b219cc34840a20e0e49e580b043863241a2fab4fc3197b7ea9cae40d09c5552fbf6c5b3a2d77b4e9d2a85741195f4e95ffdd3","ssdeep":"3072:yPQ3j6tlNJu8BwPA9UShIYNkCcpDhk6DJMj1Bce7XfRPnnW8tjet:R6tlK8BwcUKJcpDhk6DJMjrLRPnW8Fa","tlshash":"37f312cf72c1cfb70ca51aeba55879b76b382f8352816b8a501e3d649910d17268f3f1","first_seen":"2024-12-18T12:55:36.287523Z","last_seen":"2026-08-11T20:54:12.040815Z","times_seen":4524,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/bdthemes-element-pack-lite/assets/css/bdt-uikitcf1bcf1bcf1b.css?ver=3.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/bdthemes-element-pack-lite/assets/css/bdt-uikitcf1bcf1bcf1b.css?ver=3.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:34 GMT\r\nContent-Type: text/css\r\nContent-Length: 93729\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93729,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"62ec23a53d4140ba26addd8f8e14aa1e","sha1":"3223c97f3c0f2f64b72522c900d29cd7aa222574","sha256":"84245064174807a51d908f4c915d41b72f9dae6a1dca252249297ec74f0d78ea","sha512":"9fcba24a55a45dddaed87abca950d15df07f2d6d2bd3ddfbd63e777d8e26e015937d9709431c7180081644e45288d8f74b1fd3bb9d827f32b17a8210be2e008e","ssdeep":"768:LBZPG0b9mQ5EWCiB5KptK5Y1bpEQkDEInjBemtICahIbIMIXnGIvHerUIHVJNdlB:7PGaQs5K65NDB","tlshash":"9b9393995d9030acf16b8612d7d0f668f3295d82f3230aeaf5d7a32587c7ad50633a1c","first_seen":"2023-11-26T16:49:08Z","last_seen":"2026-07-27T06:35:58.167157Z","times_seen":38,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d552d552d5.css?ver=5.15.3","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d552d552d5.css?ver=5.15.3 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 57912\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-12T07:59:56.79942Z","times_seen":27943,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":730,"dns":0,"connect":0,"send":0,"wait":103,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/animations/animations.min3d363d363d36.css?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/lib/animations/animations.min3d363d363d36.css?ver=3.3.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 18468\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18468,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-12T07:59:56.919029Z","times_seen":43302,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":737,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/2021/08/woman-working-in-officee.html","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/2021/08/woman-working-in-officee.html HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/css/post-6567cc37cc37cc3.css?ver=1627820955\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 1618\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"72a1a80988cdb5b9e4e297edc7772ad7","sha1":"bb7d1d49296c5489afb35bfa40c82aa9b2d91095","sha256":"0d50cf4ed63cca4eb3de092d3bf26e3748f8f188020506a3272b5f16c575febb","sha512":"8764556ba2a393e1300a4d50e7cd03de8debd32066ca79eb0d7c5d93136264962fe02307b42cc5d5c6ddf762c1b425d0e9f5c3bba023b21fe2bff79c702e7892","ssdeep":"","tlshash":"4231862ac283454681271164fb80f6546728c291e44a0ff137dd309ffdcc1a612a73f8","first_seen":"2025-08-17T05:31:05.095617Z","last_seen":"2025-08-17T05:31:05.095617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:39.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:39 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6899c524-1396\"\r\nexpires: Wed, 10 Sep 2025 14:05:11 GMT\r\nlast-modified: Mon, 11 Aug 2025 10:25:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-11T14:05:12+00:00\r\nx-node: m9p-up-gc29\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.750542Z","times_seen":16741,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/css/post-6567cc37cc37cc3.css?ver=1627820955","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/elementor/css/post-6567cc37cc37cc3.css?ver=1627820955 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 178575\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":178575,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2cdd0a00ed0bc002b5992d16a59f2c8d","sha1":"b7c331fd97780943cdc403e90736f2036777732b","sha256":"b15ac9eb215e9f1746fbd16f5841c4e3da4ad1cb3112214999ab8d298b7aa661","sha512":"e6be4307c2242c24178d947d9890609184f63486c1cf0892fb23efbb77482eff7d7a363a5fb28cac4847b961055359f23615e89ec502849756612a95ebd6c6bc","ssdeep":"3072:Kriom5UWsL/rDiQcxw+udQy27uYO5IWXmZ0FsrMJbOV85kP0Nnu9QBYDwlN1GHiJ:Kriom5UWsL/rDiQcxw+udQy27uYO5IW/","tlshash":"25047a943f53d56ab82f348f6607f19e602c98cdc97d61eaf5258223a1b6e2633ccd05","first_seen":"2025-08-17T05:31:05.097219Z","last_seen":"2026-04-16T23:48:48.772222Z","times_seen":3,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":422,"dns":0,"connect":0,"send":0,"wait":105,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/css/post-322bf42bf42bf4.css?ver=1627639092","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/elementor/css/post-322bf42bf42bf4.css?ver=1627639092 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 13889\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13889,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4960)","md5":"9bb4ef1d5a56a25c23057f7a4cdb9f99","sha1":"4ba9d575a1a4eef67f51a000b14334a22d611143","sha256":"42081450fecff57ff806759c99bdc3093a4cbec21cb3f31efefc3479e7b3b17b","sha512":"f234ca56164340e4620ad75cbd54752c01e9f77d451720199ea38b0fc15d5b43112e5a11f1697450817d889822929de7e9aa15440998b342ed166cbfcd5eaea8","ssdeep":"192:diduIiBfiKQsm/sNsmAsL0O5dC6675npGtG9MGOX1u4M0VFBG48GNGIGLPcG4GJt:vbq4u1nAczA1um89VN5hXBXP+w","tlshash":"405221c47da382a6b4af656f6197f19d292d8ccd893d71e6f824d103b0fae163381d12","first_seen":"2023-11-21T09:38:34Z","last_seen":"2026-08-03T23:31:31.35987Z","times_seen":41,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":421,"dns":0,"connect":0,"send":0,"wait":124,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da05da05da.js?ver=4.0.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da05da05da.js?ver=4.0.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 12198\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-12T07:59:56.82625Z","times_seen":74484,"resource_available":true,"data":null}},"time_used":1049,"timings":{"blocked":945,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/js/preloaded-modules.min3d363d363d36.js?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:35.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/js/preloaded-modules.min3d363d363d36.js?ver=3.3.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 58080\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58080,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (58041)","md5":"7cf762f9c52e443339f018b55014acdd","sha1":"a287403f30d46cc7f9538c3c55d8d1dc322d498f","sha256":"6dc267c8b59839710feb0eca9a2b0674bc1ed663034099529dd882997476e684","sha512":"bc9adf79e67127fb89cd8660efe2bb4d2ae982431c7c41f0b4821b2e7238cffe8809d95ba4ada4a333429389833af306ab6be55f88574cfea344873b055f0076","ssdeep":"1536:GXrxpiqYD4LqQkGkRmdsq0WyzqB4Q7UgqVjWqDIWO8UqK9Mf6PfB//ro8xa3185r:6xX1lfBqntIB5","tlshash":"5443f99971c2f06642d7687a300f100e63371a98d844f519b572cce2aab6e8d3737fb9","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-02T21:01:12.863328Z","times_seen":396,"resource_available":true,"data":null}},"time_used":1279,"timings":{"blocked":1157,"dns":0,"connect":0,"send":0,"wait":118,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:37:47 GMT\r\nexpires: Fri, 14 Aug 2026 10:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 240769\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T09:34:45.189447Z","times_seen":257164,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":128,"dns":6,"connect":27,"send":0,"wait":18,"receive":2,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/elementor/css/post-62bf42bf42bf4.css?ver=1627639092","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/elementor/css/post-62bf42bf42bf4.css?ver=1627639092 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 11001\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11001,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11000)","md5":"654cf7c7ca363ce586d2d979b3ab90d8","sha1":"027f408bed3f8a16cca78db4ce9d662b71d46f30","sha256":"846ec21e7c0239983d7c02c57db02d0cb13339e9f6263a01a87e8558c4efc3e6","sha512":"29cf7ca7d796f93af886d645c131df9d353b18a8f2cbc612522c50644275f858548064af5d7928200751e827672e24922feca8908de6a2817b24ba766ff6b6ae","ssdeep":"192:P/r83LG75qORggFLkO1G3/KGc9GKzGvkzZ8ZzRTtzE4JmpcZgyZX:XfSPfFnrJmSPp","tlshash":"b732d4a97b32d026f4b7481eaacbf57c181cd09b091e84ffe51d9315a5ebb6f960c201","first_seen":"2024-08-19T18:57:27.783019Z","last_seen":"2026-07-27T06:35:58.145744Z","times_seen":22,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":327,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/ooohboi-steroids-for-elementor/assets/css/maindd81dd81dd81.css?ver=1.7.903052021","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/ooohboi-steroids-for-elementor/assets/css/maindd81dd81dd81.css?ver=1.7.903052021 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 12129\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12129,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2333374d31d26e2754e8994fb6f0c386","sha1":"daa852f7e8d342d09e681f74f849351aeb661ed8","sha256":"25d0d52f2e1f3e609661ac8c0e0eb3edb79768443fc2d2bceb729f289b80e6ac","sha512":"d124fa339fdfc7ee3d4f958ad8d7de4b43d2bd30a8ed18ea099137f2933cb3a2e9b672e0c64eb40132da40c317949419d8c48de2009cbd9e23d0ae925e18873d","ssdeep":"192:nuZAciZi2K8rBboQmIVVsnawYZjl4TpX1bCCAa4CnrNTAmPgt4QWYt33Wbqbdeg7:5hvjl4TpRE4QWimbqbdegNO57o3aBM","tlshash":"d04231947f432d00526fdd2bb84b911de66c80c4d7272d9ef0919987d2fae94226d2c7","first_seen":"2023-04-18T15:48:16Z","last_seen":"2026-08-03T23:31:31.224698Z","times_seen":58,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":403,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 9706c7bf5b78b4f7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 80434\r\nexpires: Fri, 07 Aug 2026 05:30:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yhGkJgrafG8ahC%2BO8QROESA3p26o2ASNJmSc5n4ch8nw45CtdrJys8ln2hwECcfcxxI1xUrTxzyaTLTWVlvQnq6uupbOoZ3D1sx3CO9lNThIwI1b%2BJUaSRE3OpTPfLoXJyBTu55Z\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-12T08:17:03.47954Z","times_seen":59682,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":15,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.minf269f269f269.js?ver=1.0.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.minf269f269f269.js?ver=1.0.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 25202\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25202,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25115)","md5":"046405de007ff73e52d17dab2af75258","sha1":"887cfb8a9de27005875f6e1c1d1ead43bd0865c8","sha256":"533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020","sha512":"280ff860a90ccffbef838f17a64c02abff9a806fd359a8e110e5d3e44b5a4961fd38637e242e431a7593d8ced74946bbf1450b6202341483bf89ab70d07660eb","ssdeep":"768:e44yLMNvgnDwYB+IlnHB9/bNlJyI3G7OaXiQx9kpETpUwnOQdZMvUtVo0uKHp+3:Ir6pyYG7OH2pHZMvUtzO3","tlshash":"dbb2b3ce7140706386eba1f8519f1a2652336026a20755cdbc3eeec55e68e9532b3f3d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-12T07:59:56.819308Z","times_seen":19379,"resource_available":true,"data":null}},"time_used":960,"timings":{"blocked":815,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/2021/07/finance-e1627827550977.jpg","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/2021/07/finance-e1627827550977.jpg HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3062314\r\nConnection: keep-alive\r\nLast-Modified: Sat, 22 Apr 2023 23:46:31 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3062314,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 6000x4000, components 3","md5":"ce727a51e9e6f13982d8022a7a712166","sha1":"a01144a1b7f9e13aa799a1891e8f0c8da1b73a5d","sha256":"55a397fd827f46428341b9998151dbd1a5a1cdcfe47a43c16ee6eb5e388f7c4d","sha512":"853cc39b385bca3e8fcfd47a3078eaccb785c8b8a1488752a2ba8f9d40f45644074516e00cc1e83b4f90a75d1949e5fe828ff1d32a97ea7a123987fb6708e902","ssdeep":"24576:gi6vWZaTKT9+4xIVamSqujJS/Vw80hiMCgoPxIqbRmO8xvRy9/QB90:gik5TKTaEB+tw85/P1bRTdc90","tlshash":"6b253362a5434a74d3deaf38a8d2ccbea46422f95371ac59721405adc8df0c9ff2157c","first_seen":"2025-08-17T05:31:05.103333Z","last_seen":"2026-07-11T18:49:06.151972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":600,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-includes/css/dist/block-library/style.min41a341a341a3.css?ver=5.8","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-includes/css/dist/block-library/style.min41a341a341a3.css?ver=5.8 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 80574\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80574,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (33376)","md5":"43c4bc05b5e3b0a6684a7c3a52e63590","sha1":"ed6d95d525a710a82e8b8583e9ba7bce3b2a4722","sha256":"9110fc122dda3067c424d9b8ff7747e2030b0bd9298f69a3683d399ad3373a6a","sha512":"661ce465d60c6c6d5738c9a7e948985772e3cbfed985d91d704121f77b91e7cdd43421217fa9a19dba6d2f5ac68ad4887dce1cede825395966587f29c8bace79","ssdeep":"768:LX1XvTz4EkA5SOV+LQ35lqCXm9XhUnoeYKiFzL487Plxo66F7UJGqUzu8ZZ+ucJ0:LX1X7DkA5SOV+LQ35S9fBFrS","tlshash":"3673e99007b4ccf835bfa73a8e5de148a517d942c54abbe6f0b2d190728c9455ee3b0b","first_seen":"2023-04-05T08:47:51Z","last_seen":"2026-08-12T06:55:07.566855Z","times_seen":7252,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":204,"dns":1,"connect":101,"send":0,"wait":202,"receive":129,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demo.moxcreative.com/kingsley/wp-includes/js/wp-emoji-release.min.js?ver=5.8","fqdn":"demo.moxcreative.com","domain":"moxcreative.com","tld":"com"},"ip":{"addr":"35.209.74.69","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.demo.moxcreative.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 04:42:28 GMT","end":"Wed, 05 Nov 2025 04:42:27 GMT"},"fingerprint":{"sha1":"C9:E1:D0:5A:0E:8D:4B:CA:B0:EF:32:FD:9F:1E:EC:04:58:C7:FA:09","sha256":"41:AD:09:EA:13:5E:29:42:BA:24:28:31:FF:09:07:7F:96:52:BC:64:60:1E:08:63:7E:1C:6F:AF:0A:5A:94:95"}}},"request":{"raw":"GET /kingsley/wp-includes/js/wp-emoji-release.min.js?ver=5.8 HTTP/1.1\r\nHost: demo.moxcreative.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 05:30:35 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 15 Jul 2025 19:37:49 GMT\r\netag: W/\"4b33-639fce957c9ae\"\r\nx-httpd: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-08-12T09:41:11.403851Z","times_seen":212452,"resource_available":true,"data":null}},"time_used":909,"timings":{"blocked":386,"dns":36,"connect":113,"send":0,"wait":120,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor/assets/lib/dialog/dialog.mina288a288a288.js?ver=4.8.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor/assets/lib/dialog/dialog.mina288a288a288.js?ver=4.8.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10863\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10863,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10725)","md5":"58baf0f238d7afc7ab926b8d51e5b559","sha1":"8515e5f578269e29c048450f78c107935d325dff","sha256":"2989e0b9e836cb9de3274d641ec6a58c2052f039e790ddd59b22303930bfdeeb","sha512":"a15d0799c93d0c93789582d5330bda9aeb5332a2ef4917fe0f6a758ea77a1231b976dc960ba17d0038bd16acb34c62400ec4213ab458d1b301fb6141958fa005","ssdeep":"192:sEPwJdswSRibO6JSplZn41SFzpYK2p7ESa/TI9w0uV6uSnotk+nWEdpTARHrLG4/:FH6JElZn4WpYKC7E5rI9oV6ultk6tIe6","tlshash":"822286c5f155396687bfb034713f230a223748ecf8445c68bc5d95e1aef8a4e02b6b69","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-08-12T07:59:56.933618Z","times_seen":6147,"resource_available":true,"data":null}},"time_used":1153,"timings":{"blocked":1043,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v5-font-face.min.css?token=a7077a5c05","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:35.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v5-font-face.min.css?token=a7077a5c05 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemstonetradehub.cc/\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:35 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUTn61fijKRMi8haNQeiYycjsnsSGQl00aHsyJ7uAPVjJ%2FGWA9AW%2BFNsFbqSeC%2FThJAlg%2BufeU5RMQHXdoIDP3biVTj%2BSCYqwWQB8ZhYHWoXjw%3D%3D\"}]}\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 193fe983778f7496cce206a132f2e55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: r4Zj08OoAqlSvVWhBAhVyvqPlOVQRh0vipA3YFMZJKFHBg2Yqloinw==\r\nage: 21025297\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ce9c230eaa656cebb4bcb218cc034374\"\r\ncontent-encoding: br\r\ncf-ray: 9706c7c38dbfb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":823,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (608)","md5":"ce9c230eaa656cebb4bcb218cc034374","sha1":"e7c962a7b5113bd9273f8eb56b1fd75d9a152d2d","sha256":"da44f714aafade532fab93527bdcec46596d87cfef74a613d529e34686b6a064","sha512":"38a99c70f756999b2a49b4d2f27aa2de516bcbf19596d63db88cabfa6251b3bb7f75621d4829ee18098ca63f9fc03a5bd1ab3ed757f0a30e011e841aac1ace6d","ssdeep":"","tlshash":"14012b5d4569006141510f1138dbbb0abd0ab16778a95ea3911b8d2c4cfa90773f5f09","first_seen":"2024-12-18T12:55:36.292311Z","last_seen":"2026-08-11T20:54:12.044703Z","times_seen":7071,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v4-shims.min.css?token=a7077a5c05","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:35.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v4-shims.min.css?token=a7077a5c05 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemstonetradehub.cc/\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:35 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"43c494a755b81101cd0097c73bf4bd42\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 5Oqj847LwpockNvh2detG5f7iyAygB1n7G4POzaIFmZt_XKtJNrZIA==\r\nage: 8224512\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cc0HbHfWzgb%2FHfkOy1MnhF9zRudFSSROa9RPnaUJfhzFZQnn6tUmuPBiOG2dA2OiDnzEvn2pry8uZo6hZY5Ol5V3AiELjY5%2Ff4Z1q%2FtwB4NgA%3D%3D\"}]}\r\ncf-ray: 9706c7c38dbcb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21210,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20995)","md5":"43c494a755b81101cd0097c73bf4bd42","sha1":"f4102ef32474a0629d2989a777ee5e738af6a6ec","sha256":"c723bc4b9c56380b5ccc209f6c288c26028e2ecad0d27795f665fb01a9f4e9ac","sha512":"7839dd420acce148a9ca85b74bdf7995ce7640eeb0cfacc26eb83e78154b0a59e7ea0ddfe63ebb6becec3b2821b53696a1120c3edcf720d2fe870697bd61418a","ssdeep":"384:/Wl6sTnnbF+PJeQlGngUHPAHyw5+E9mu1t:/O60OJigUHPAHyCtb","tlshash":"199258051b2d90a3b2dc3c6bb4417ee42776278919d64c51e3273c84bee789b31eeb61","first_seen":"2024-12-18T04:50:29.505919Z","last_seen":"2026-08-11T20:54:12.063069Z","times_seen":7324,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":92,"dns":27,"connect":1,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:37 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-ray: 9706c7d0c9ee5696-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 77473\r\nexpires: Fri, 07 Aug 2026 05:30:37 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TaZq%2BURTDayxP62e2w6rJGt2hflxqWYWoE2Q69CRMd3hZEozuYzEZA8k4gN1o9PttjyOXOMAMhhZZ0AUnVN6T5HxhH8uGOHlOyfv4dZc5UnaT%2Fjxn3xoBjKqk%2FkXDSAUj9Bky26M\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-12T08:47:02.259699Z","times_seen":45147,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v27/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/heebo/v27/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30180\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 13 Aug 2025 20:05:43 GMT\r\nexpires: Thu, 13 Aug 2026 20:05:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 293093\r\nlast-modified: Wed, 28 May 2025 16:58:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30180,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30180, version 1.0","md5":"1f4bad26370a4f9da9e665b2effa87cf","sha1":"481c8d7a295b471ad369e1e2d0ba472fd247a92b","sha256":"0398bc9ec2f670d12183b4d81a68122e129719511813bfe121b2c437a269cb38","sha512":"991ac6501b6722f6f6b67aeeb7566885d839c499abb2d1e8d452b6fde8c16566e13ddf89850bf79a7d450e094276f7b513caf9a57823640c1f1432af4399e9ff","ssdeep":"768:ukHKFLlRTAS0yu7Q1AGA4zZqGfaRc6ca+ctm5zSKGOxtYie2:ukHAcO1A4Oca8z/j","tlshash":"abd201a9391232c8e3ab74834731d2021db99c26551691438d36c7f3c7ff79666a8b4a","first_seen":"2025-05-29T19:02:52.604503Z","last_seen":"2026-08-01T11:23:28.737379Z","times_seen":979,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/uploads/sites/56/2021/07/at-the-meeting-with-finance-advisor.jpg","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/uploads/sites/56/2021/07/at-the-meeting-with-finance-advisor.jpg HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1310784\r\nConnection: keep-alive\r\nLast-Modified: Sat, 22 Apr 2023 23:46:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1310784,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 3818x2545, components 3","md5":"cf40a9f2a39007d768fb7cdc6a19a437","sha1":"1e7fab67808869ab812777c356d7407222b3b398","sha256":"367f42073f0ad8b8df5c1bd6a58b3fa7a96e74cd0a2716a11823e8c9435a3e09","sha512":"7b737fde1bffbf95b9fc7af7dd3598f7fca84b3d0a83032d3c28e511f4ae90ab02d2537197425b0a38b64cb7f14a4cd34d790a92f61d6ff6a358e7ca319e8794","ssdeep":"24576:5QLWSQgysPWtr44o+AfRYUSJLGfjtiGg8PT3SeyEaRFa83u:CugyLrfAfRUJLkjEGZPTfaHacu","tlshash":"9a253306a752cc52cec650f4b24c2292f17a27cc074a258b1f75ddbefa4ceaa6718f54","first_seen":"2025-08-17T05:31:05.107925Z","last_seen":"2025-08-17T05:31:05.107925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/elementor/assets/css/frontend.min3d363d363d36.css?ver=3.3.1","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/elementor/assets/css/frontend.min3d363d363d36.css?ver=3.3.1 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 122691\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122691,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65497)","md5":"be44ed3d2346e0d6c06c211d851384a3","sha1":"ae20f99345d52e3ddb7e162de40e82e95f7d88bc","sha256":"98825588378b6af479f05fd9a60da82705cc2b79e276d53976e9997a0be5f2b8","sha512":"f072f3e3239b13aa451e8303b105d0ea51bdacae100f9e6da3a2f71ef1647c3b6e150dae478c2942b08d1e437906dd3ae3ea294d26eb6d22bcdf34f997f14710","ssdeep":"768:9f6VYI8DUx0rgxPm0Em67bKIMs3P8nqlyBPGSfku95qHGufiHuYRmsdbTykOwZaq:9eGhmufiOYRDdbTykxZ5iifQL7y","tlshash":"d6c395237d072109622f4d2b5683768c6294c1c5ee937bd9f892a807c7fbdd43b3295a","first_seen":"2023-04-08T11:45:16Z","last_seen":"2026-08-08T22:46:45.758225Z","times_seen":427,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":134,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/ooohboi-steroids-for-elementor/assets/js/ooohboi-steroids-min706770677067.js?ver=1.7.903082021b","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/ooohboi-steroids-for-elementor/assets/js/ooohboi-steroids-min706770677067.js?ver=1.7.903082021b HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 24637\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24637), with no line terminators","md5":"550cbf1995a2de078b164c24a8b293d1","sha1":"49c2a73aec476158f5c788cf041f88504f23231d","sha256":"5d50f9709e9652f62808535c2cda86d5eee932b8c2ba8dadcc686bbeaf374655","sha512":"c73784e2ee676abff023a8139dcc5b25d51217866ce0cdccbe94167df2f51d91ea56c61cb73f7153df1dfb541f705b0913d56e1a352544c4f6d27e1752a56a7b","ssdeep":"768:X3fCP1849F249C49e989e5gLS7a5G3r/gL6i5jJHzd:O9H9p9e989wo5zd","tlshash":"3eb2829bb659181626ff39eb3017208cba314f5ed8098119b1b849f79239fc13362f79","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.195343Z","times_seen":41,"resource_available":true,"data":null}},"time_used":862,"timings":{"blocked":759,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle25b625b625b6.js?ver=2.3.5","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle25b625b625b6.js?ver=2.3.5 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 810\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":810,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (810), with no line terminators","md5":"5ab577656d48e7fb2da4071c3477d4f4","sha1":"34a292f50ec979d7967a08c2ff4d707c39a11f3c","sha256":"8667a50fdab17dd946e43e37c6fd1623583b9440bdca887e44cc726e48feedaf","sha512":"4d8ef2d24d6f96a7cb3883a527c4151eb4894025b9af92ed0c8828aaaefd9b97e631e4b9a10a7d2f8171607c655bacde7c6c1aed5755929bc0b82344b32762fe","ssdeep":"","tlshash":"8f01f1af0770283941761391617a1718113843913b33bf3da03c254e10584eb673bfbe","first_seen":"2023-03-07T01:16:00Z","last_seen":"2026-08-12T03:00:40.996262Z","times_seen":1986,"resource_available":true,"data":null}},"time_used":1243,"timings":{"blocked":1144,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp/wp-content/plugins/void-elementor-whmcs-elements/assets/css/style41a341a341a3.css?ver=5.8","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp/wp-content/plugins/void-elementor-whmcs-elements/assets/css/style41a341a341a3.css?ver=5.8 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 13419\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f294c044477b1b79eaab5369e3b6a476","sha1":"c4294c3af68d628b52f06402318876003a970706","sha256":"beaef7ea07b8e646df6766d23ec74bf8a79252a724146086d448afb311f04851","sha512":"4278cb13936e01afb3747b3bb178787e8eeb75575a88ebc873e6a29634951b55f1681af9179a951e45cc203980ef92b73c96f3858db5c24db435d303d9c7d367","ssdeep":"192:Tmn87VS7pdsE7XKabI5iYSxoNW4ANEjrDFb74V8zSG+uWT:T76asIkYJd7re","tlshash":"4752f358eba24b85613aca75e7f2b709e74c2013470145f9bf9922228fb507da270fdd","first_seen":"2023-08-26T11:16:11Z","last_seen":"2026-08-05T03:48:28.371454Z","times_seen":69,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":402,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.minee9aee9aee9a.js?ver=3.2.2","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.minee9aee9aee9a.js?ver=3.2.2 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 156833\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156833,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59946), with LF, NEL line terminators","md5":"a8fa2dc6da9c7f2d5accd1eeea968957","sha1":"a92eb02cc0d7da44522a2e2fbba04de63624fc8b","sha256":"3c3ef9998414972b985076a5202e016ad4a71f9052eb1da62be10ed8f2752cc7","sha512":"b45b00eb35c5bab7feda77301322c049e1c92bb4d2da282838e1f54339caf8e0c81a40633ad4a2e7bf6768cb9de220292ac4e06bfd909e0a1fc368870483da7a","ssdeep":"1536:QEbSn00lbOatWbVhvZJbkyBBHhEhraD7U0mUiqlUlyYqfqNbx483qYjQmbyeqItl:N2oZK9P+i9RnDG6eHQ6U3","tlshash":"8be3e89930c2f47646cb617a701f110eb3322dac5486f059b6b9c8d29bb5e9d3332b79","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-08-03T23:31:31.356373Z","times_seen":277,"resource_available":true,"data":null}},"time_used":1261,"timings":{"blocked":1145,"dns":0,"connect":0,"send":0,"wait":104,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:36.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:37:47 GMT\r\nexpires: Fri, 14 Aug 2026 10:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 240769\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T09:34:45.189447Z","times_seen":257164,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":132,"dns":6,"connect":28,"send":0,"wait":8,"receive":5,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-6.jivosite.com/widget/status/2215872/mFg0ggm4CC?rnd=0.16926164510958353","fqdn":"node-ya-6.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:37.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2215872/mFg0ggm4CC?rnd=0.16926164510958353 HTTP/1.1\r\nHost: node-ya-6.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gemstonetradehub.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://gemstonetradehub.cc\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 187\r\ndate: Sun, 17 Aug 2025 05:30:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cbfc78df9a4bf1ec5a1140468faef6d","sha1":"ba05c5d85074f9c853b457d693fb5f6927c8368e","sha256":"d88c4841610330d2469b69c04f518827e4328441ac6b045bec354eae4c9fde1c","sha512":"9a474e78050b3e8a40359b29e63f072d574537dcb29e892cd32e308045c3d1690a37761aece0c9c7bd79c3948cef1faf5381f0c407af50f74dd9ec0a42baed7f","ssdeep":"","tlshash":"09c01229143a18d606909654f48bfb4b4a25011315c1971ce682be4460db5b3e55e007","first_seen":"2025-08-17T05:31:05.128314Z","last_seen":"2025-08-17T05:31:05.128314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":135,"dns":59,"connect":34,"send":0,"wait":35,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CHeebo%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CInter%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=5.8","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CHeebo%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CInter%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=5.8 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 Aug 2025 05:30:35 GMT\r\ndate: Sun, 17 Aug 2025 05:30:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195876,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f9e92bb1bd43d221a4c257699af4225f","sha1":"0501356c646694ee93f2fcfcc5d022f838ff9c30","sha256":"dcbfde86ce5824813f98dd85346bab059b878ffcd5eab69c1caede703116302d","sha512":"f3cab63ccf34a5c2d990691f56b395e08147725728c9a234278dc402e2914c6e7d924a72f13c084e910eea55116ccf8450227b07d4c7a55a2de07527e9acac13","ssdeep":"768:hMacKOOTu9lbktLv61xzQFHxNfaaC1u41CC/WcFDFjFKFjFaBFeKFpFNFhc8f8a4:3Xwl27E5qOdEbqZQXG1Ij2pk3Sdo","tlshash":"ed146fa1042b94006b831cd223ce7e30ee8f92547185c075abfd5fabeddada6527835d","first_seen":"2025-08-01T01:52:49.516346Z","last_seen":"2025-08-17T05:33:36.759375Z","times_seen":5,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":258,"dns":0,"connect":30,"send":0,"wait":49,"receive":0,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 05:30:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\ncf-ray: 9706c7bf4cb156b5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 77491\r\nexpires: Fri, 07 Aug 2026 05:30:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lbLNJlOUCyxhDy2Xv%2FNyO67mnYJBdkjIahAH4jyPO4XmhsUC9Ikt2bU8njXqtfdu81plnhcMJ%2FsA%2BItYEEsGVZSdbLAX1BCrMaeL78IpUs%2FvdorHGZSJ%2Fg%2F13hAYG2viGYmmQ7hY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-12T09:41:11.513672Z","times_seen":308086,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":16,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-12T05:10:43.173608Z","times_seen":146716,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":839,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/temp2/wp-includes/js/imagesloaded.mineda1eda1eda1.js?ver=4.1.4","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:34.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /temp2/wp-includes/js/imagesloaded.mineda1eda1eda1.js?ver=4.1.4 HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemstonetradehub.cc/\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:35 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 5629\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5629,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-08-12T06:14:50.6606Z","times_seen":23495,"resource_available":true,"data":null}},"time_used":976,"timings":{"blocked":827,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemstonetradehub.cc/cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.html","fqdn":"gemstonetradehub.cc","domain":"gemstonetradehub.cc","tld":"cc"},"ip":{"addr":"198.27.109.53","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemstonetradehub.cc/","date":"2025-08-17T05:30:35.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gemstonetradehub.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 15:00:26 GMT","end":"Tue, 28 Oct 2025 15:00:25 GMT"},"fingerprint":{"sha1":"64:C8:F3:3B:41:87:22:8A:F6:14:4F:43:00:63:9A:61:B1:45:7D:94","sha256":"02:39:B8:3A:6F:E0:6F:B3:1F:E8:8C:2E:07:2B:D1:B3:34:3D:A2:BB:DD:C0:F5:C1:4A:6E:67:22:74:23:84:6D"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.html HTTP/1.1\r\nHost: gemstonetradehub.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=lpc7pf54j4ds8hfs0lqtvvs3i3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 05:30:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 1610\r\nConnection: keep-alive\r\nLast-Modified: Wed, 27 Jul 2022 05:39:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1610,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"9ee0d98e36d12c7a4a4a70d1f1f6433f","sha1":"660df5b40f46f0ac090f82bf3f4459791b1c70ab","sha256":"fa8bd6774bf4f95a31859d1eac041382b1c8da8ac71589932a368a1ff84edcf7","sha512":"e7e9f0ff5535809bdedabda359523a39d48053e5db39018593388080a875a04965d12ad5cb2ecbf515c2c462875537bf0592d0a3fb6535f831006b0b4823dfe6","ssdeep":"","tlshash":"b131862ad286466ad1134254fb80e7a42a288261b49a0ff1375e315ff9cc1f782973dc","first_seen":"2025-08-17T05:31:05.090875Z","last_seen":"2025-08-17T05:31:05.090875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"gemstonetradehub.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}