{"report_id":"01cfd909-db1d-4203-8348-94194aa91c5d","version":6,"status":"done","tags":[],"date":"2026-04-21T17:56:38Z","url":{"schema":"https","addr":"autoproftrade.com","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"autoproftrade.com/","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"title":"Auto Proftrade","dom":{"size":1516936,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"23dcdee74b855b1100e1d71be36e046f","sha1":"9fd3be0e781d2e6642801adc4529492d974f1b6a","sha256":"30183dd2c9b89708a3bd566736b0c4b8e29b1dc4410a1d39af559a745baa7699","sha512":"d0d09c5f316fcb51fafdb615ca5ed98ebedd605f4b393a3b8620fb9f4fefddea8b6f5f113d211123cbeba314f0c6cfcb99bd7dfc721f04e1a2ef48686b2f3134","ssdeep":"24576:sCGs0WFmBI9PLn/l6Fxhv9cCig53l3SOzjdAp/l:sCGs0WABI9PLnN6Fxhv9cCig53hSOzjM","tlshash":"b0656cd5b2c5f4a507e301e6a43b1002a33a1c1a740da468fbbcdcd7a95a58e6337f79","dom_hash":"domhashc44c55ddb06c034b0a61fba39eb90807","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"autoproftrade.com","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T17:56:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":1,"received_data":49367,"sent_data":557,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":346139,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2026-04-16T07:27:08.188166Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssir.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-05-22","domain_rank":47035,"first_seen":"2014-03-18T14:23:25Z","last_seen":"2025-12-29T03:52:06.448428Z","alert_count":0,"request_count":2,"received_data":115115,"sent_data":992,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"media.istockphoto.com","ip":{"addr":"52.84.50.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2000-01-06","domain_rank":166591,"first_seen":"2018-11-13T21:06:51Z","last_seen":"2026-04-20T13:53:10.392671Z","alert_count":0,"request_count":1,"received_data":39580,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-04-18T18:16:57.954148Z","alert_count":0,"request_count":1,"received_data":5213,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"realestateinvestingwomen.com","ip":{"addr":"35.227.42.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":54785,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"widgets.coingecko.com","ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":3132971,"first_seen":"2018-07-05T11:10:42Z","last_seen":"2026-04-21T04:26:28.206999Z","alert_count":0,"request_count":1,"received_data":274415,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2026-04-20T11:55:30.798079Z","alert_count":0,"request_count":1,"received_data":74479,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"autoproftrade.com","ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-11-26","domain_rank":0,"first_seen":"2026-04-21T17:56:43.959905Z","last_seen":"2026-04-21T17:56:43.959905Z","alert_count":19,"request_count":19,"received_data":4031506,"sent_data":8588,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}]},{"fqdn":"images.pexels.com","ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-05-15","domain_rank":246953,"first_seen":"2016-11-15T16:49:09Z","last_seen":"2026-04-16T10:39:48.929234Z","alert_count":0,"request_count":6,"received_data":438844,"sent_data":3004,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2026-04-19T05:36:24.517368Z","alert_count":0,"request_count":5,"received_data":81409,"sent_data":2413,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-04-16T00:13:26.426619Z","alert_count":0,"request_count":8,"received_data":1734956,"sent_data":3794,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"node-ya-8.jivosite.com","ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"domain_registered":"2011-05-06","domain_rank":1400950,"first_seen":"2023-01-19T04:33:00Z","last_seen":"2026-04-15T21:33:20.076999Z","alert_count":0,"request_count":1,"received_data":706,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":2,"received_data":9240,"sent_data":956,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"widgets.coingecko.com/gecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7f64bdd2a7e3c1323490d64f335eea8","sha1":"a491d1913d03e2b1af2ed624bde644162a6f7101","sha256":"0a6ceaf4c624607f7254d9db7684d244ed3617505359efa6e1306d8adbb273cd","sha512":"66c1738f2a7fab3aeec9834cc9aedc957e3348c8b1453bffae94478005b789dd705099bb166a11fd34a99e938ff5b47401804875cf89a830a0f198a83078d68c","ssdeep":"3072:O9MgZYwaOjzkT9HCij8Iv7RfjrnPLioRvQtdLjrUzpwIrGKD:CjnOEI1brQrPIaKD","tlshash":"48442a8df6c0f1a547f263e5606f2947b77a28f869888380ea31f4d5647e05c9532fac","size":273534,"data":"","first_seen":"2025-05-29T13:20:45.096448Z","last_seen":"2026-04-21T17:59:20.861447Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/static/js/main.068aa5c8.js","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8878bff204fced433e5974af5c987396","sha1":"a2d452bbf75b3888783a54a0645f630db951965f","sha256":"abda02af2e586a4b7836e44e88b7a07ee615f6133266f213aa59149bc31d9fcf","sha512":"6b1011268e894d111eb51895dde62da2902989b61b562ad7b65e4af0c5fb33cc9b0d5aa405c3b9337d52fcc8fc4140c9266db671a45cfda0907ce21c472382d8","ssdeep":"12288:3mQ0NN5ZmxmV3qbyCPdmcPBd2Kx+AK9GW4FiH2k:f0NN5Zmx3byCPdmcPL2Kx+Aa4FiH2k","tlshash":"5fb45b8a7150f265abf301e6407f4505733a1a5e740dc8a4b178fcda68a888d727bfbd","size":539622,"data":"","first_seen":"2026-04-21T17:56:52.226948Z","last_seen":"2026-04-21T17:59:20.805773Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/rZFtMbvxR2","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc36f9b94a67eb56edaa3da5e250a105","sha1":"4945c36abe783ea673212487adfdd2260031dd5c","sha256":"47057cbd0c948be21fba80fdc675d5da2d4adaf86e78115733dc75832769786a","sha512":"fb44e5e62125b354d76e3e79c184e2d936a3730e1038344f9d3e683175c7849d84001a54f45b321c80c5a7e41d5aebb5a762292bbc7c2ae6803aaa28c8663242","ssdeep":"384:boU+JvepohmPF0jbrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI/UAjX54cr7sXWcPdv","tlshash":"a8823b6e7959b97743b218b9516f6209733549ebd404c920a401e98d7cb8ace813fef8","size":18118,"data":"","first_seen":"2026-04-14T13:34:30.591514Z","last_seen":"2026-04-21T22:42:09.296627Z","times_seen":736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1776174542","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d302eedc3f49e8d0de23349016a8a6d","sha1":"84388f7190efc5c290823dd127aad9cdf62de31d","sha256":"7bd5d05576c280363505db6b88d2fd45a5b17d2df2c0738e97a06c915416f360","sha512":"f2f035e6d5fa1caa1ab89269d22b02e84651d1de70924e09f7f59c0c2a11b51fa00e5213acc9686daecacaffd53e7fe79fed04bbb9a222d3a7e4a023fb1e4765","ssdeep":"24576:DcdR2+482k9n4pzCuZlhEacrkPGukiE8SBC2tzPSigPgYlFqnH7XhHX6mW93:DcdR2982k9n4pzjcrkPGukiE8SBC2tbo","tlshash":"35656bc5b2c5f06103d355e6a03b2005b33a2859340da068bbbcdddbe95a98e6377f79","size":1549192,"data":"","first_seen":"2026-04-14T13:14:24.994799Z","last_seen":"2026-04-21T22:42:09.466957Z","times_seen":671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db3372f5ec3fe346ebb5167a8ec9b6bb","sha1":"e42c721552d7827713889ad6f800391d6cfddfb2","sha256":"fdd7135c9170dc258aad15955de54d2cd4e60c8f9846bab802e74863f29ae10c","sha512":"fc510d09a06c0227375e40328d93bbaff3f22816aa10dfada504d938ed2640234cd7f7e3d1e204e42fee9906645e698c127915d2ecc996bd2df071c39e9be33d","ssdeep":"24576:qCGs0WFmBI9PLn/l6Fxhv9cCig53l3SOzjdAp/l:qCGs0WABI9PLnN6Fxhv9cCig53hSOzjo","tlshash":"74656cd5b2c5f4a507e301e6a43b1002a33a1c1a740da468fbbcdcd7a95a58e6337f79","size":1516742,"data":"","first_seen":"2026-04-14T13:14:25.006045Z","last_seen":"2026-04-21T22:42:09.477148Z","times_seen":671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/ef9fe7c/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f87471a3d1fb33be6a51912861776bb","sha1":"8bb52b99066392f10ab336b980dfbe0b8fb4dfc6","sha256":"34e2fac9b502488543160a64f763a23608d196acf4dd0c4fecd57ef957572fcf","sha512":"a363d37884af6c3b20e287e9324a16055968acc28d04f79d7acb9b5f8a0cc67e7edf70d05495a9e9dbe14996e704484d9b710ae06e12bd6d87d9d68b515a54e0","ssdeep":"192:xbPfmk/7Obf14M6dOIpUTPqZ8BijFLeEJK:x7fH7ObdFWOIphZ8wjFCmK","tlshash":"a222d71ee7017f360fa613c3744f7b5376a480e592646c75d89c826943b9bcab217b8c","size":10670,"data":"","first_seen":"2026-03-31T14:01:24.495424Z","last_seen":"2026-04-21T22:41:55.034778Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"8ceee436e6126dc8b82ca73e5251e11a","sha1":"b80f795edb446a6ec84e8d669b8f2d4ca0371476","sha256":"f7b05f4a82a13e31f02c2f2dae23ce0693647ab44cc862e7c8c321b90d87d959","sha512":"06b2c43551463eb6e8e8da0a3a261bffa6f23609b75fcc91e378a4a35191d2ca9e6de7aa0fc1101deb993d2a4537055a24f157089817be7c46b6b024bf1f4888","ssdeep":"24576:ECGs0WFmBI9PfXXlwFZEuicCig93l3SdzjdApfx:ECGs0WABI9PfX1wFZEuicCig93hSdzjW","tlshash":"48656cd5b2c5f4a507e301e6943b1002a33a2c1a740da468fbbcdcd7a95a58e6337f79","size":1514941,"data":"","first_seen":"2026-04-14T13:14:25.020142Z","last_seen":"2026-04-21T22:42:09.491863Z","times_seen":663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"autoproftrade.com/gold3.png","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /gold3.png HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Nov 2025 12:21:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 96615\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 290 x 197, 8-bit/color RGB, non-interlaced","md5":"afe329f82af91bbc513ef20c648ced04","sha1":"1c7bd5713144eb5637a132a6e25772d4a2464fd1","sha256":"c53dcb1a3962bd728b5b0d802d78819a8849de84a4b20d6e1b1fc564f36e02e0","sha512":"06e7933b411f59ef85d3147e8bc979a5debd879a84ae0b2ef7a9a830ea5a3a4389223ac7de9113aef6e1542681cf37cf6e6c334af538bb6b89694cc30f0d4500","ssdeep":"1536:7afAf4DMSKeQzoD/dUnJLh2nDz/Jwue7biOZSd7/rA6mjCfaEgkcM:+yYMwkoJUn+z/JcWZK2faE4M","tlshash":"259312fa6db4c157d31298830397c174457275eb3f37b32e3299c1e4f92a4b8a6a4521","first_seen":"2024-08-20T14:54:48.618881Z","last_seen":"2026-04-21T17:59:20.853846Z","times_seen":27,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:19.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 248\r\nOrigin: https://autoproftrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":248,"data":"{\"event\":\"bundle_loaded\",\"widget_id\":\"rZFtMbvxR2\",\"chat_mode\":\"offline\",\"site_id\":2687713,\"device\":\"desktop\",\"visitor_id\":\"cb602ac38fa3a76b\",\"widget_version\":\"190.7.0\",\"shard\":\"ya\",\"param1\":\"190.7.0\",\"param2\":\"newCode\",\"param3\":\"en-US\",\"param4\":\"\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.7\r\ndate: Tue, 21 Apr 2026 17:56:20 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T22:09:25.934933Z","times_seen":14033814,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":366,"dns":302,"connect":27,"send":0,"wait":27,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/4968384/pexels-photo-4968384.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 20:57:05 GMT","end":"Mon, 06 Jul 2026 20:57:04 GMT"},"fingerprint":{"sha1":"7A:33:B2:9D:52:27:0B:AA:9A:32:29:E4:97:F5:70:1E:54:B0:E0:71","sha256":"D4:8C:EE:77:0E:BB:EA:D8:EF:B7:34:DE:E4:0E:4A:27:BD:65:D6:F5:D2:27:C4:6B:D9:87:7C:B0:10:A0:F6:5F"}}},"request":{"raw":"GET /photos/4968384/pexels-photo-4968384.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800 HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29646\r\nset-cookie: __cf_bm=CqeAzcgyi5zrdT9uTnzYM.34fJwLc8leDNhy7shKNF0-1776794175.369083-1.0.1.1-Dnzl1cdGrgY46LSRjbUvTObQK0NCfrcviKYwr5ub8gRkj8se26Tkob9CGU56vat6gPDvZwwiaNmh3R7XjelIVlzVeRnQ.HFKkbGxyeRp65pqxnXf7CmN4hGeL7f09MlL; HttpOnly; Secure; Path=/; Domain=pexels.com; Expires=Tue, 21 Apr 2026 18:26:15 GMT\n_cfuvid=VCQbWdN.aWXcOT.RS9AklOeZnpwXWMWIKUl0fnUSCK8-1776794175.369083-1.0.1.1-gMa63qAtK1B3aDf5LRb1_kVGVOVXhMJ1xCQqzeYmWI4; HttpOnly; SameSite=None; Secure; Path=/; Domain=pexels.com\r\ncf-ray: 9efe43ac0d9575ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"pexels-photo-4968384.webp\"\r\nexpires: Wed, 21 Apr 2027 17:56:15 GMT\r\nlast-modified: Sun, 19 Apr 2026 15:07:48 GMT\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=32477\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-cache: HIT, HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: 5930e857f8441c8e8c4306cb49bd533c1c062d6e\r\nx-served-by: cache-fra-etou8220105-FRA, cache-ber1080055-BER\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x533, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e4fde314519b1a5acd84a56ba200a7e5","sha1":"14519aecfa05d52e33e9dd7bcf1a28a9da106571","sha256":"d3f4cd9b0831769bc0d481b0566289252d69246bffaf26e26e2f4b4ecf3a7947","sha512":"8b0e6996be96a920fa48b316af97b4fe34b59381b276af0b7f85aaf73b0012e7b52880709ff04e98115b92cbccdbfdb1f752ca7e7c84be2c1ca5b0b1ebd10d28","ssdeep":"384:qgiPo8XE9BvXUhcRF16wuqCEd2Dj1ihBqqvS6ECEXUb280FzdPbE2iKbUmznXByo:n38XE+K6kCNL4ECEfphzR/n","tlshash":"5cd2e1d41903104bc9797e2071f5afcbc23a7ac54daa393da951e6bc42ed097c8e0a77","first_seen":"2026-04-21T17:56:52.192501Z","last_seen":"2026-04-21T17:59:20.866829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":6,"connect":6,"send":0,"wait":63,"receive":1,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/large/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/279/large/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: AfuKWJd+EqcwweT0VgEm6+/c0BTGHR9A2laflJDnhk0QvXATj/+WqhfB5XSuG2MDc8uRZHMi04g=\r\nx-amz-request-id: 5ZK48BRCW41ZWPT6\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"af87366546180c799987073ac53f0733\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6vmhZ_PH5UG1O..xRx9fhSAwELb.H8zx\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 9561\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y90gTyBGKcZcV4SF7ahGxIQ51mSKigvLENTDAh7PokKETpydHXt%2Fbksq1qDHzY52SA9xdON3W5JysqJGlAEfdA6MBHqSVUHez24XjcXFSlDtfT4sSaLXOo1s6RgfuMjBQdTDcCfr%2B%2BFlOuOo\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-bgj: h2pri,imgq:85\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=13114\r\nage: 5219\r\ncf-ray: 9efe43ad0aac5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"39d54251b232d1e9e8a9665e7c2c5117","sha1":"025f4d72498175bf3219ba5fe2a6341b791d8b24","sha256":"5212de593ffa17b5acc04260fe702e32b3bb815f2eda4d7ca15b085967bd39f3","sha512":"c2f616084a077398dbed12026099332369ae72f8743c1a3acf1603af3a8ce032ac090cf0bc89d11270e8e2e6bd7d79383d556db591d19459bb873aab16daa0db","ssdeep":"96:dFdUh3pppql79CzKT7MLbrbKIgB1lpIRrFjWzR6/KPax4SfPUFvzJ/OWCVe8pabE:ZSfpEAzXzvElkFjy4rNcFvzYJVjaLypt","tlshash":"e112bf6f3030faa4599c8beb653659c09457b5b3868c38230aeee8ddecc54e088813c5","first_seen":"2025-04-01T12:02:22.555194Z","last_seen":"2026-04-21T18:24:52.482559Z","times_seen":325,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":7,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/download%20(1).jpeg","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /download%20(1).jpeg HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 19 Jul 2025 19:34:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6731\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 187x269, components 3","md5":"13030cb06b082aca1a856b6c72bee8bf","sha1":"483d40c5e5530bf851a320d889846be0125967ab","sha256":"fe05ecad5b91face30e7208922d5b82ce06c68e80ef8daa75b6810641c30acec","sha512":"cd3565f72eef5416254cbece489207ed769c2977d9783f42d165ea8517c3e1bc493b75c98b5f4c43b62e9fbeb6101cab4778ea4fa06cb7b24ebe05bb2bedf06a","ssdeep":"96:EU15csQDwOpZi5lWjtFZdWx/jFBWTUhbbLddeYeOBE2/U7iaLKe:V56TZql+3Z8x/2TUhPNBY+he","tlshash":"8bd19dd18cae32a4f0a0d09119703cdfc746f60108f27b15863e56cb22ec571b7beaa4","first_seen":"2026-04-21T17:56:52.19421Z","last_seen":"2026-04-21T17:59:20.90154Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/logox-removebg-preview.png","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:16.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /logox-removebg-preview.png HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Nov 2025 19:01:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48714\r\ndate: Tue, 21 Apr 2026 17:56:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2358 x 401, 8-bit/color RGBA, non-interlaced","md5":"0faca9ea145af4e4dfb1661651f32d08","sha1":"1ec86d914f72aac90f2fe15f0516ae07519ab4ad","sha256":"948d42dfb52f21790c6b5ef680046f6d37a18f41ee61aa353af19a10d6235f91","sha512":"dd82d2700ec768261936ee5dc8deab9eb406c0088f283feb22aa5fe3c98d6046e32d6520041ed29a09512024b6a41c41137cc848f7a5e1f1c07f023b507b208a","ssdeep":"768:S/DZO+5hJ+Mo2fIgYyjSr5BejLPKg4q50q5L/kMszl9R8nCW3aw1o:SLoTMo2AryjmmjLPKg4q5rol9UDp2","tlshash":"0523f1922845d5a0c7839f37dd261bf0d7f9026800c99ba49ab1173bcedfb487546de1","first_seen":"2026-04-21T17:56:52.198196Z","last_seen":"2026-04-21T17:59:20.810802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:19.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:19 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69de0593-16b0\"\r\nexpires: Tue, 19 May 2026 23:58:12 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-19T23:58:12+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-21T21:21:00.116736Z","times_seen":13575,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/325/large/Tether.png?1696501661","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/325/large/Tether.png?1696501661 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: gtv2N0+zi9XKdvt5h3cDff5tBrPZt384+icRyL2BS47ORaQVQLUK+pftNzIzWz8v9IE9XKmzzBs=\r\nx-amz-request-id: F55C8AMP1T8QEY2S\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:52:40 GMT\r\netag: \"7768a86999a4abbd7aa72a688ab9f45f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZGy4ZbYaJZwuUhw8hmG27eYu_ersPBoC\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 11843\r\nserver: cloudflare\r\nage: 789\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iljEFBGe6Eu99XlvTRXeMpQliwjUjkpwEU6AL0uQUJXXVZxE7Tm67ez2xoqSxEZS1asF9xdrykk6VA1YVhW88QyqfAruU2x1YGkFRJhlbak2No6ImyBVuqAhN8UwzL0XjwqexVuRbQ%2Bphpnj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9efe43ad3aad5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"7768a86999a4abbd7aa72a688ab9f45f","sha1":"7a000148961198a425c7a63b3819460a85293667","sha256":"fe92c0abef2d3d775e50e42fc693394737571b498e7ed71ae07b82cf4d537d36","sha512":"65a56307a3906940d8ac5fda972cc29daa25a2045c7fa604f792f6c7a7600a8e84a40f73aed4985add0204ddbeff8e07953c7c7d622e6634ee4b78ca3c8d9299","ssdeep":"192:eSHPmg+UxC6bMe56ixy3tTnPQhNNc4aeOMLiqgg57h++a1nZ:BHumC6bMO6Z9jKNe4aSfgUhBa1Z","tlshash":"aa32b0556cc79335994f7060a9fb378cca33eb51b4a16a5c7934b478d08a83cad02755","first_seen":"2024-07-10T18:48:43Z","last_seen":"2026-04-21T17:59:20.886105Z","times_seen":362,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/4128/large/solana.png?1718769756","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/4128/large/solana.png?1718769756 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: kvbugblJXZdhEYfEmEbA1EJTM4+jVhVycGBpeRbc4lDBbUmU1L5OYoHmaOYpNQIpmDP9TTRikKQ=\r\nx-amz-request-id: F553XKCB28NBJZA8\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\netag: \"c77657e6bcd28104bcacc56b7d5c0cb0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: IjyuRv4vQPFqEiqEjW0r8gug6.5RQ8SI\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 21309\r\nserver: cloudflare\r\nage: 7015\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WFLKt44vVPfzU9XRCjrqF%2BYkEr%2B3m%2BDZtmvJaJo0hO41EstRAsLi5UMDvNI5LYfDLHV5oX4l5Uy8Y28nQJfNgKLC3o1GSJvVJGbJshlb5I0EfyFQUdedPLEYZX1sALpw6QRtVu%2FrPtV7Ag%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9efe43ad4ab15694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"c77657e6bcd28104bcacc56b7d5c0cb0","sha1":"1c9b57fccdfdcd054800c3759598b4a106307b60","sha256":"78ee4d656f4f152a90d733f4eaaa4e1685e25bc654087acdb62bfe494d668976","sha512":"69ced65e4e3aca2ede5e4379cd4e4052d9e12d94871b4071b12a5f35e1b6e746ede959af5895138a3441ae54d056ed601e9585bcae242f92532d0d9454ac857b","ssdeep":"384:BywR9TdNJ0PLEjkZQYhG3Tz5jybRqCrMcESYyToXZICrittpDp7w:zLdNWhh0TNjylqCrMczDTmI7w","tlshash":"62a2e1e1f9411128804cb0bc6297dfc4ed6e6b4b4eda5a6589cef6d87f201411a0cf9c","first_seen":"2024-07-10T18:48:43Z","last_seen":"2026-04-21T17:59:20.831581Z","times_seen":385,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-8.jivosite.com/widget/status/2687713/rZFtMbvxR2?rnd=0.2918104626533833","fqdn":"node-ya-8.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:17.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2687713/rZFtMbvxR2?rnd=0.2918104626533833 HTTP/1.1\r\nHost: node-ya-8.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://autoproftrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: sw\r\ndate: Tue, 21 Apr 2026 17:56:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://autoproftrade.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"479fd6811dd557f5d7263ce9926f1fe5","sha1":"200d4b1015be78c7d139ae6c1a8bde8418ec56b3","sha256":"11a938d8d616c5a6e8de659a605bd3d70c499a1bf4e655e173d0df6c7bc4fb60","sha512":"896854c9e49194b150dbe83f493a73e16e756b69a4fc1e94b8ef9ca0a3627274761deed7f1c758ca6fc0f97c96c4b144c55ecdbe4d48b80b703cfef2383039c9","ssdeep":"","tlshash":"3ca024371111544c0314c3d0d1c775051730010133d1d034d151700471f7cf005fd007","first_seen":"2026-04-21T17:56:52.201032Z","last_seen":"2026-04-21T17:59:20.84944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":416,"dns":320,"connect":19,"send":0,"wait":65,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/nft2.jpg","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /nft2.jpg HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Nov 2025 12:20:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 84967\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 290x197, components 3","md5":"893362d5fc1c74f2dd613c4c3d3a46be","sha1":"5ebcf4c2021ab86f6135648a20163115ba86510d","sha256":"50649e1c67a32948bd0ec072b290a4c80cefbdff8f96f01e9e8a9d88d8a94a64","sha512":"6d044371317b5434ed76c3997e62487573e5ac17f2ba411e293e5ace747c34794cd76cc7bc5aa3eecad7679558b342e0b9d4287cae7361f155a57ce12b96b079","ssdeep":"1536:mp2Y5Ie82Q07KnMYLEM3z4+m1bdbcfmi+ncZDbHmzhsxU78dN569y:fWQ0unMSEM3zMZJn6TmNXwz56M","tlshash":"8d8302473f6ae627e11fc9793bcca8e348966b1cf865126353133c17c6a0e84fda54a4","first_seen":"2024-08-20T14:54:48.623807Z","last_seen":"2026-04-21T17:59:20.848472Z","times_seen":36,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:14.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Inter:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Apr 2026 17:56:14 GMT\r\ndate: Tue, 21 Apr 2026 17:56:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fcf63d91b46adf99bd3db1a56530254","sha1":"62f7d93d0b191e1e8464958268f225f51dd1752d","sha256":"63867a7c4bb197935b85ada1c4bcbc95951598dfb736b24132f0a43e5e5e365c","sha512":"16d25c5cc841006ca8e86ef334efb051054257e6990275a3a0d1e25f9adc6c665b65ff9083dfc9c409d84b69365a26eb9ba875431ca75765743b70902e684d14","ssdeep":"","tlshash":"0451ab92002ba404ab931dc233cf7f3aaece50856085d2b96ffd1dc65cead66436875d","first_seen":"2025-09-10T17:57:06.167004Z","last_seen":"2026-04-21T20:19:39.102739Z","times_seen":25685,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/logox-removebg-preview.png","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /logox-removebg-preview.png HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Nov 2025 19:01:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48714\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2358 x 401, 8-bit/color RGBA, non-interlaced","md5":"0faca9ea145af4e4dfb1661651f32d08","sha1":"1ec86d914f72aac90f2fe15f0516ae07519ab4ad","sha256":"948d42dfb52f21790c6b5ef680046f6d37a18f41ee61aa353af19a10d6235f91","sha512":"dd82d2700ec768261936ee5dc8deab9eb406c0088f283feb22aa5fe3c98d6046e32d6520041ed29a09512024b6a41c41137cc848f7a5e1f1c07f023b507b208a","ssdeep":"768:S/DZO+5hJ+Mo2fIgYyjSr5BejLPKg4q50q5L/kMszl9R8nCW3aw1o:SLoTMo2AryjmmjLPKg4q5rol9UDp2","tlshash":"0523f1922845d5a0c7839f37dd261bf0d7f9026800c99ba49ab1173bcedfb487546de1","first_seen":"2026-04-21T17:56:52.198196Z","last_seen":"2026-04-21T17:59:20.810802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/mining.jpg","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /mining.jpg HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Nov 2025 12:19:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82649\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82649,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 290x197, components 3","md5":"211500b5fb96b1e5840c065b17eea5a3","sha1":"7de5819902b3000ccba2755dd98ac88104a3980c","sha256":"7e271374fdd8d2d604746a8b36bb6dc588278428dc2b4359d54a406b97ddf332","sha512":"0d9d42e768c5e7e54d5350f88f476a2e96a78c034794e101d2e185f652b351c5f4def098ac81affdd8fff6d5697892e7bb83a7d8d6a59d52f769842bddebaf4b","ssdeep":"1536:sL/MsJzfUZapkQSlrDDExj78dx4wB95CRumXmpwgm5ujNqr:O/u4sLEBodywBGsdpjiuS","tlshash":"a18302d8562d0c0ff6897d3e6e9a19d22f68071ad11dd7cb1422cbadf70c089816eb4e","first_seen":"2024-08-20T14:54:48.624816Z","last_seen":"2026-04-21T17:59:20.839015Z","times_seen":27,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/6693655/pexels-photo-6693655.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 20:57:05 GMT","end":"Mon, 06 Jul 2026 20:57:04 GMT"},"fingerprint":{"sha1":"7A:33:B2:9D:52:27:0B:AA:9A:32:29:E4:97:F5:70:1E:54:B0:E0:71","sha256":"D4:8C:EE:77:0E:BB:EA:D8:EF:B7:34:DE:E4:0E:4A:27:BD:65:D6:F5:D2:27:C4:6B:D9:87:7C:B0:10:A0:F6:5F"}}},"request":{"raw":"GET /photos/6693655/pexels-photo-6693655.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800 HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58022\r\nset-cookie: __cf_bm=ShmQ6oLr3VHgr4MNH.DbZUhFX.Y.N4klH89vyRLTIQs-1776794175.3539343-1.0.1.1-t5rR1D6IKoDSMQv3AhWIWDBvaBkjtDOs6.urXlM67wsC769fubsttPYmQQBC0x5Jk7ytb2j03uiV.31fhYI8AyvqZpR5qSWCWJLCXv4In_NYtVOknDYCC79cEDCnxpXK; HttpOnly; Secure; Path=/; Domain=pexels.com; Expires=Tue, 21 Apr 2026 18:26:15 GMT\n_cfuvid=vSyp9ghDbngHUG0f9A_kYUR18326VpU5GJ1vpY2Ra4w-1776794175.3539343-1.0.1.1-f7SNQ5k0atVUfT6yuw0NKu0MDEkkG64_lwPXhlLyhgI; HttpOnly; SameSite=None; Secure; Path=/; Domain=pexels.com\r\ncf-ray: 9efe43abfd6f75ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 21 Apr 2027 17:56:15 GMT\r\nlast-modified: Sun, 19 Apr 2026 09:52:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: status=not_needed\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: 155fed5933e789a1096b154f7e3d26b88c270d96\r\nx-served-by: cache-fra-eddf8230229-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":58022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x533, components 3","md5":"020180cd466510a99a3b5ff23ad0e2de","sha1":"e9f7ba648fd8be477bae8e6d6cb75d4aa7954f9a","sha256":"357ed91dc76f0e588be091d24e71a5456b7317bffdcdacb6dba72973e7991739","sha512":"a721a09e4af3ee06fb11d396924fb7605e3412a258e869156fc95a84c055b6500f7ecb3a410ff5ea43f952490591b353898f28bf214f65151310450d862ad28a","ssdeep":"1536:t+ATuhZlMOxQDr0sD6Vh3Yhew+CjNYIeQhMF/qHurk:t+U0Zlz1sDeh3rxC5OQCSH9","tlshash":"a843014c89b4d54fff7bbcb5361c0072cba68205a7d0efb84c9646858914af02db39e4","first_seen":"2026-04-21T17:56:52.204305Z","last_seen":"2026-04-21T17:59:20.871795Z","times_seen":2,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":122,"dns":20,"connect":6,"send":0,"wait":121,"receive":6,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/8441247/pexels-photo-8441247.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 20:57:05 GMT","end":"Mon, 06 Jul 2026 20:57:04 GMT"},"fingerprint":{"sha1":"7A:33:B2:9D:52:27:0B:AA:9A:32:29:E4:97:F5:70:1E:54:B0:E0:71","sha256":"D4:8C:EE:77:0E:BB:EA:D8:EF:B7:34:DE:E4:0E:4A:27:BD:65:D6:F5:D2:27:C4:6B:D9:87:7C:B0:10:A0:F6:5F"}}},"request":{"raw":"GET /photos/8441247/pexels-photo-8441247.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800 HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86346\r\nset-cookie: __cf_bm=bcC9.L50hLr2cKuSe4xobtPUfVRvUCT2pPUaEItbWts-1776794175.3498943-1.0.1.1-6w1NjSIlaLJlXfEyPlfpNtn6issCEqRmpTHTEITTUyU6gNWNc1QPZeOOiXGVvtQ_zsrIHQzAejhJwjw64qxKC8nUQIPbvaqLGyCBq3ux_cmMA5NkAYcPDZBlL59wWeE3; HttpOnly; Secure; Path=/; Domain=pexels.com; Expires=Tue, 21 Apr 2026 18:26:15 GMT\n_cfuvid=dQHClCRasDEAyjK9f4JsmDhmL.mtd6ydu18i_sSwnKw-1776794175.3498943-1.0.1.1-cdIZIK9PYUNEdafIBC6.kEUBECbbXAS82cFywz_.05c; HttpOnly; SameSite=None; Secure; Path=/; Domain=pexels.com\r\ncf-ray: 9efe43abed6275ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"pexels-photo-8441247.webp\"\r\nexpires: Wed, 21 Apr 2027 17:56:15 GMT\r\nlast-modified: Tue, 17 Mar 2026 17:37:29 GMT\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=91215\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: d52b7d3d29fec2017890775f6042057c38c75f69\r\nx-served-by: cache-fra-eddf8230039-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x1200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a442c876f9308d3f2a7fa399454e7b23","sha1":"e01fbdd427034e112150329acb4d6eef8f2736d3","sha256":"54fc7d58561ec8414dd23048503a4a33161a531245e47796fdbcc377420c4003","sha512":"5af74c2037e56180626c3b8bb496e4f1ef6c85e669f9e748553cba42a7c853e02f82d15aa94c20acfb46ba68323c399e8e325faeb6e3cae258e89d8f2a121df0","ssdeep":"1536:dp1BsYhm0BOr8PiaXOQKOyGDkre3S/eWMXGr+ULeXZoSO/NSkWL5p:dV/BO0H7yJsaqWnQoHNuL5p","tlshash":"468302d5428a846b27d61b0d0fb5f4594c9cbbc2bfeb91f8cac9b7fc6f851116816108","first_seen":"2026-04-21T17:56:52.205221Z","last_seen":"2026-04-21T17:59:20.844476Z","times_seen":2,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":117,"dns":20,"connect":6,"send":0,"wait":101,"receive":4,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssir.org/images/blog/Lamy-Leijonhufvud-ODonohoe-next-decade-impact-invest-592x444.jpg","fqdn":"ssir.org","domain":"ssir.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.135Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/blog/Lamy-Leijonhufvud-ODonohoe-next-decade-impact-invest-592x444.jpg HTTP/1.1\r\nHost: ssir.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T22:09:25.934933Z","times_seen":14033814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.istockphoto.com/id/1323542329/photo/woman-is-checking-bitcoin-price-chart-on-digital-exchange-on-smartphone-cryptocurrency-future.jpg?s=612x612\u0026w=0\u0026k=20\u0026c=AGoQBhJUN13ESkgc3MAxFPYGEK4WCpl4gSS-uBha-yI=","fqdn":"media.istockphoto.com","domain":"istockphoto.com","tld":"com"},"ip":{"addr":"52.84.50.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.gettyimages.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2A:CF:A6:4E:44:B1:DA:FA:BC:7E:92:5C:A4:6E:12:E0:83:00:24:0B","sha256":"A8:86:96:F2:A3:A9:F9:27:90:BB:3B:1C:33:EA:C8:A5:58:EB:E6:4D:5B:B4:36:97:17:54:9D:B8:2B:98:00:0A"}}},"request":{"raw":"GET /id/1323542329/photo/woman-is-checking-bitcoin-price-chart-on-digital-exchange-on-smartphone-cryptocurrency-future.jpg?s=612x612\u0026w=0\u0026k=20\u0026c=AGoQBhJUN13ESkgc3MAxFPYGEK4WCpl4gSS-uBha-yI= HTTP/1.1\r\nHost: media.istockphoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nContent-Length: 38935\r\nConnection: keep-alive\r\nDate: Sat, 04 Apr 2026 06:50:54 GMT\r\nContent-Disposition: inline; filename=istockphoto-1323542329-612x612.jpg\r\nServer: Kestrel\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=7776000\r\nLast-Modified: Sat, 04 Apr 2026 06:50:54 GMT\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nX-Amz-Cf-Id: 4IOJ3YuAr3Okj2glJQ1v1fNLureVZAuX2FHY5UdPFmj0byXkJKBPDQ==\r\nAge: 1508721\r\nStrict-Transport-Security: max-age=60; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38935,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Closeup - Woman is checking Bitcoin price chart on digital exchange on smartphone, cryptocurrency future price action predictio, xresolution=179, yresolution=187], progressive, precision 8, 612x408, components 3","md5":"40072dbc66211adbb492346ae68aaa60","sha1":"9f91933fb4791a40fb94d2d6bb99f8ee1e9bb426","sha256":"3ab028e3a92e8c951b2c8a5893acdf41e3061a938386f90241d6c17bc90aae05","sha512":"6e0eb095ea33615422f8de25d04b8c6af3ee45f7fc3fd16a708831d8d49216eb9c6f018d7d08053e4314574f0f6a8876a994226b4c2b3fb4d0083cf7cc65822f","ssdeep":"768:DZuhRF+0tpLquT6bmBd+UpqvPVHHI/LRWXoL8UnhBDz0IRpJED/aZlBzILL:DWTHqU6nvuOoL8UnrUa3cn","tlshash":"6a03f16bb02b0671c8bb9ca269f513479377d524c4c077cdefc7926a2af49e05f84186","first_seen":"2026-04-21T17:56:52.206217Z","last_seen":"2026-04-21T17:59:20.852112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":117,"dns":24,"connect":2,"send":0,"wait":31,"receive":1,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/meta.jpg","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /meta.jpg HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Nov 2025 12:07:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58109\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 290x197, components 3","md5":"b01ce577bb039fbbd85ac499a6b60188","sha1":"b2305a4fc8e6c2cc45c6cf6fa5af60243e635215","sha256":"e4735be0636b4052e43ff6d810e53733483b9d9d04dc43ed335bd84b2410df91","sha512":"0f50c09e4becbdbf1443ff2ff08efb3aba6b2cecfec96b92271d51353f84c53db09423ed76414dbac13e8a65a135ac7ec5e39b82cf8d601a2b59b66ffbd10f3f","ssdeep":"1536:2nmfgicNzxbECbqjsMvO6wHSnLBxmroROTs08yEkluw:2GgnlNEwqpASlgdb8rklb","tlshash":"7743f13975c2caeadfc9e93c03c44937637bc23a4ed78509182c6b6bd5887e2014ea95","first_seen":"2024-08-20T14:54:48.618115Z","last_seen":"2026-04-21T17:59:20.835918Z","times_seen":27,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/large/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/1/large/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 12242\r\nx-amz-id-2: nx0KvfiqGvDw4MnJemf5dwEAuPu0VQzNco/YptjhKVwnaQct2dk5hj78zsbVfR2mBa8+7ZTq6So=\r\nx-amz-request-id: F556GJ1MTFPEXH9P\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"565e8c524f6da22928811f836d0b92a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K_Yd_oAsiQpaEoTt9rotaTCh6C_AUMdt\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 6104\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUY9spIKPcPA%2F9SYM%2BZIMkn5hrITfM8ee5xMD7CW%2FtboEob7vH75Jcbs1DNahJC0lRHjieBYplTNNjFnq7qd0spOXaWyEjgRKIXZVq4c%2BFZCM1iT9ip2mW3ILF37asPFlOsmVQQdtL%2BZFe8D\"}]}\r\ncf-ray: 9efe43ac58d64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"565e8c524f6da22928811f836d0b92a2","sha1":"c52a8b6052273f04ffe097517461948beb849d3b","sha256":"1eb4e75d64a76a5d1fba301715ae227c683b34e8f75291670cdf7ae2a59de86f","sha512":"eaec675e23843f9fbe93edf354d54bd9b35001daa17b2345f6193e004035f1d16e0f5fdd933826a0dfb2e58e803174adf0cffdedba3ed561b1f1f528b15f4263","ssdeep":"192:CcG4VfIT9czHUiIxaA0BOlAD6sXLsU9Hogsr/ncqUd/gaPQ8SB+Dfd4rfMst/C0b:1G4VfIOExaA0Bz6aLmncqqoFBdLMoC0","tlshash":"1a42c005aae317c9cfa9803311a524136489c3800e65e8e6b1d4dc7cee9eb096fb37e5","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-21T18:24:52.529733Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":35,"dns":22,"connect":1,"send":0,"wait":8,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/825/large/bnb-icon2_2x.png?1696501970","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/825/large/bnb-icon2_2x.png?1696501970 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: A+MkiuIUUasezVBGSQLPsMYUsedDMwT2L0eY3ahbzAm1tdjPX7IfPeHAh7QOUqfyvYbIf54OijY=\r\nx-amz-request-id: F55BK344RTFSAQAA\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 03:02:57 GMT\r\netag: \"d2963b42f5b0f6cdcad306c98082cfbc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: GeU4bu9KKlgRS2f17Kc5LLYvQNcl.X40\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 21673\r\nserver: cloudflare\r\nage: 2329\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7rKEnGPPzd0xSSljqLtX2VPUQMm8IL85jP%2F%2BN%2FG8B9jgpQN4%2FmXQxg2CWGQFGuUnN3Kdfz4QeTxYHCS0%2FsTfUs0y1XoWV5MsHrM9UPqzb5vMZMmFZyMd9UauIDqKHNMDr0Dvlxj6oDu%2Bgfi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9efe43ad3aae5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"d2963b42f5b0f6cdcad306c98082cfbc","sha1":"918ef4bf2083e0deb045febec8847c5b2811efe6","sha256":"72a5e32484f693a8a2d6f8310d364c4362911daf764603e955c79e17fffb33e0","sha512":"8ad332b591d291ac1e346f8b6c7e9d1fa3fce5d4f3436fd006e10c95c399bcfbb265fb28a452fd869ad25375d8b0bce535467d302a3953008336a047bb644c53","ssdeep":"384:igm58+U4mI5NsuKLdjjq6ZpqG6WS3bJ0pdZCqqhBnk/ZrateYC5XBTpiwL7oo:X+U4mIkuAjqCF60poBnUZraedpiSt","tlshash":"2da2e0c0bce0bb50573a5fa7ccfb992c57110f5b5aaa4e46bdb3c028e175d8391a2349","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-21T17:59:20.854714Z","times_seen":362,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:19.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:19 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69c28d30-1396\"\r\nexpires: Sun, 26 Apr 2026 23:25:22 GMT\r\nlast-modified: Tue, 24 Mar 2026 13:10:08 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-03-27T23:25:22+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-21T21:21:00.117314Z","times_seen":13573,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/markets?ids=bitcoin%2Cethereum%2Ctether%2Cbinancecoin%2Csolana\u0026locale=en\u0026source=geckowidgets\u0026vs_currency=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:14.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 17:57:17 GMT","end":"Thu, 09 Jul 2026 17:57:16 GMT"},"fingerprint":{"sha1":"0A:76:FC:A0:B4:90:2E:93:25:BB:9A:D5:01:C3:A5:38:BF:76:78:92","sha256":"14:91:25:42:87:CA:3E:E2:A5:79:BF:0B:95:61:5D:98:A3:D4:89:33:61:77:84:02:C3:BD:2E:BC:FF:4E:77:D7"}}},"request":{"raw":"GET /api/v3/coins/markets?ids=bitcoin%2Cethereum%2Ctether%2Cbinancecoin%2Csolana\u0026locale=en\u0026source=geckowidgets\u0026vs_currency=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://autoproftrade.com/\r\nOrigin: https://autoproftrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ntotal: 5\r\nper-page: 100\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"18fb19bfa2ced51712b88e218a923da0\"\r\nx-request-id: 0fd83bf3-db5f-408b-b468-c242637149eb\r\nx-runtime: 0.002781\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: HIT\r\ncf-ray: 9efe43a92a100731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3969,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"69fdd2a5fb6a20918ab3219cb5c3b612","sha1":"04bbeec1249e66712a2c1911c4f9d86fe962b0a0","sha256":"d8038935eeb52ae7d093e8877a9c6c60d6f7abd1ee9baf416aa9e0095b9704c9","sha512":"e7285244a0430cf7e3311907f5ea3256df687c20f2b3a3fc680c1585105d29187011000b71493cf14bbcc165239cd13ca2f7df96bc1606ad514cbfb5b665f444","ssdeep":"","tlshash":"ef8102520e749ce7c290365a758a36141d2ebeda9ccddc175fcecece4064bea410ed0a","first_seen":"2026-04-21T17:56:52.21039Z","last_seen":"2026-04-21T17:56:52.21039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":51,"dns":22,"connect":1,"send":0,"wait":129,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/download%20(4).jpeg","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /download%20(4).jpeg HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 19 Jul 2025 19:34:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6364\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 198x254, components 3","md5":"84c390a043d6a23af4f6ef721329c1ce","sha1":"413a1126c09230f259c75a8b381b66ce04d3ca1a","sha256":"ae2e5da14237ce38162432c3e9f9f46003526929244c123931afbf265bd6ebbf","sha512":"f63103cdb129f91fa021d42f45eaff6c0813a0105f30f30ba8d07e8e495c8a9c981eb39df024bc0ea5aedd5e37154fdd96433f42d8ab30b36e2c4b104abf871f","ssdeep":"96:tnAxTs79pwgwIXBM3hnVtOBNiLJNSpopA2RG1E9rfmIzk23BR/gAY:mTKpwgqtmiPSpZyG1Etfmuk23P/S","tlshash":"0cd18ed37f5d81b6cf27fa34a8b66229ff8a3f417d72254024941650e9d1ea0988c943","first_seen":"2026-04-21T17:56:52.211453Z","last_seen":"2026-04-21T17:59:20.889858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/aurofxx.png","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /aurofxx.png HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Nov 2025 19:31:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2490353\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2490353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1841 x 1228, 8-bit/color RGBA, non-interlaced","md5":"29b0a5b985069501dc7fa6ba9270197f","sha1":"f8fea179733550665d6f3f313bd1c6677332fa4d","sha256":"d517a528abd8be0af006408ecc153b75e4afbb2b7a4b493109cf56a558764fd2","sha512":"b99f1b77f1e9e91a7df5993fbf017196d772c25ed08974145373f89465dc1ca3f6897dfd27aee5f2a6f6ef6581bb93be0330bde975774bb07e247c28031c867f","ssdeep":"24576:u7hxcc6/N7aAO5wfgVDD6EZDtckwzEnMjZzn9avuN8T:ScckN2wfgVDD6ko5jI/","tlshash":"a125233ce58e69ade22c5fe1453cc5980838335387ac92e169a3ae7394077ddb727634","first_seen":"2026-04-21T17:56:52.213092Z","last_seen":"2026-04-21T17:59:20.833934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":512,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/ef9fe7c/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:18.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/ef9fe7c/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:18 GMT\r\ncontent-type: text/css\r\ncontent-length: 25412\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69de0593-6344\"\r\nexpires: Sat, 25 Apr 2026 21:37:06 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-15T21:37:06+00:00\r\nx-node: m9-up-gc73\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137129,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"61690c6f4b544189c62d56da27ccef4e","sha1":"ec19d64de187dbbd2d1d178689fa0ec4bc150a22","sha256":"a34c2b77d49c19b654d8b6dc09dbb3a5c7284f456d4441f9c35aa5e23320f7d5","sha512":"4a07472b18bae495cdf7c9bfb8b6fb8b39eb05083ec915c7fa7bdf7e1091b0821bcf41b1ee3e8070e5d182d2676b22aa6245d96b48bfd22ec8895e8ac898dde6","ssdeep":"1536:GL5MTKByi6q65rhYDuZy/2o2uSAptyJ6w69+/lF43UW63FFPQvipOeOEDK6hcboT:laTM37F","tlshash":"7fd3f856ead2953cf91e951ac9c5aa3ca63dd102cf330dbff340a3d443caad21276949","first_seen":"2026-04-14T13:14:24.987139Z","last_seen":"2026-04-21T22:42:09.362891Z","times_seen":679,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T17:56:13.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Nov 2025 12:41:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 661\r\ndate: Tue, 21 Apr 2026 17:56:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1523), with no line terminators","md5":"7addd6fac0ea6ca9a97e519f6935fdc5","sha1":"3196a0d4bbbc24c2f7f96eda409c722af3d984fe","sha256":"c8fc3c9eb98f083c762a6f6c5e3a6a906c3140473905ca58e45fc713090dd1e6","sha512":"21fe4b2ee8f00af09f70ec6e7f475376afc88d672655178df27e0e3971649ee377ba2524791f2316cc41923eacbdf93f5ffed8e4af2bab2eea68eef6650c77d4","ssdeep":"","tlshash":"8c3165378e104ddd137013a7f872b12dc819394eaaa0ddd56866007792d4be6483ada2","first_seen":"2026-04-21T17:56:52.215298Z","last_seen":"2026-04-21T17:59:20.895587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":315,"dns":133,"connect":90,"send":0,"wait":98,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realestateinvestingwomen.com/wp-content/uploads/2024/05/factors-to-make-real-estate-investment-in-islamabad-jpg.webp","fqdn":"realestateinvestingwomen.com","domain":"realestateinvestingwomen.com","tld":"com"},"ip":{"addr":"35.227.42.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realestateinvestingwomen.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:24:19 GMT","end":"Tue, 07 Jul 2026 11:24:18 GMT"},"fingerprint":{"sha1":"07:E9:C5:C0:F0:41:E3:D3:C6:2E:C3:44:49:9A:EB:CD:6D:A0:3E:D8","sha256":"56:FC:0D:85:9C:47:10:48:AD:1B:38:F9:C8:45:96:CC:54:CF:32:87:C1:89:2D:22:75:34:B0:BC:F3:FF:30:C8"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/factors-to-make-real-estate-investment-in-islamabad-jpg.webp HTTP/1.1\r\nHost: realestateinvestingwomen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54460\r\nlast-modified: Mon, 07 Jul 2025 06:43:18 GMT\r\netag: \"686b6c86-d4bc\"\r\ncache-control: public, max-age=31536000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x844, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"05bdb768f9f7fce78cb3b74e828515b8","sha1":"62ab6a3f3c271605fbeee538915e95091a0708fc","sha256":"a3a7b6ab0229e5c19d1ec2a9ad70e9bdfff113083b3829ef6a30e911c6cf3bf4","sha512":"4ffa4e54ae165445e4f1537c04e5965ab6654947d69e017bbf5ddca73372b2c561c9b92d8c5edfc3a76249ca587458027b5f70b20c577c89d13f33164fdb697f","ssdeep":"1536:yJEtF/j3T3Nv7VJe1CZWZKOrj4U/+WYPQ6gVg4Ba:y23T9jV81WWZK6j4Nvfg24A","tlshash":"8e3302da758c8bc2f35e5fc892c781cef83fe0ee74986596c218925016643702ac56f9","first_seen":"2026-04-21T17:56:52.21667Z","last_seen":"2026-04-21T17:59:20.82722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1008,"timings":{"blocked":322,"dns":106,"connect":110,"send":0,"wait":224,"receive":123,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/download.jpeg","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /download.jpeg HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 19 Jul 2025 19:34:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7109\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x239, components 3","md5":"3be2129e18b6c2cd0936cd8d145d9c89","sha1":"e2e05272d980a0840184341a1d0b48b75dcc7638","sha256":"58f2aefc3a4e9ff3eff0a7f7e4d7299e6fc187f45cfb8c44f1d258feb1f67e73","sha512":"7fb0775214d596bc21696997ebc668b0330e26f1763f96e53bcc8d37df2982554504ef52ab232250f5adf44cf104f1fc0d365931cafcc0e34ba1ad3413d5d1b2","ssdeep":"192:tchXBa5SjoVSRNSq46AYioYQZuHaDjagoIiyLzMtTQhl:tchR1j1kzkioYQMHWcKQxQhl","tlshash":"5de18d921d694e15f9ceea346124a794e7b833e02ed123a938547d18b617a40bd1e3d3","first_seen":"2026-04-21T17:56:52.217534Z","last_seen":"2026-04-21T17:59:20.892899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/download%20(3).jpeg","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /download%20(3).jpeg HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 19 Jul 2025 19:34:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5806\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 185x273, components 3","md5":"e4e0df9312e9785c0ce411d4461a9aa4","sha1":"a1aed1bb2915d87b1fde1f1e37a96ce02ef1783f","sha256":"6f363a85982c58862974003cbf689ed4826f168c7fb91abd32fd3c26921402ed","sha512":"df2ab83c03ec446433ef694cd9db863aae969cdbab92bf5fba911b8ddf0a59b68a787e064970046ce487130a442211469b5d9dff82b59611548a76793ea472ae","ssdeep":"96:ZXLCcmtarkknWG5/AcA3ffXhJrvwgjIVMAW6+n/HUta1USdJSTlEA5CiyifFhtNl:pStSkk3/Acy/hFtMVI/HUX+448Fh/TJ","tlshash":"03c18ef23cc6d807a580ee7d77109a17db1098e320e9d27f6411163244a9687f49e1cf","first_seen":"2026-04-21T17:56:52.218564Z","last_seen":"2026-04-21T17:59:20.868684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/static/media/remixicon.bb211d855a1864aa5b67.woff2","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /static/media/remixicon.bb211d855a1864aa5b67.woff2 HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/static/css/main.35cbde5e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 27 Nov 2025 12:41:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 176812\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":176812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 176812, version 1.0","md5":"9f0118b43f57fc3ea9f55bbfb3a3b185","sha1":"f3ec7500bd2c615bba2de885d46bcaa91c20aa9b","sha256":"7ea90bbc7c505b98dd7d3a089a6fa32067e353150192951cedb05e26820936cf","sha512":"6a17cdb1c39d1638a2e69ac8c9cf15229d9f64ce9026965dd8e8878700994fd1db65f21be31e18a49ec36e0b0ca522d05ab7f3884b21a022d9ccde9795d0baab","ssdeep":"3072:8oI+omjEjOiEHbaa4yYDtZimTAj2QdJohF8EBGWXsL1u:8r+5baa4yYRTw2Q8C48g","tlshash":"300413f0eda0d72cd9c7fc12f48db606aa9c579475f790901bb0fef869ca4a8965c420","first_seen":"2024-12-20T14:28:38.376296Z","last_seen":"2026-04-21T18:21:48.793083Z","times_seen":1641,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:14.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Apr 2026 17:56:14 GMT\r\ndate: Tue, 21 Apr 2026 17:56:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"d23c245db387dad561e166fe2cea137e","sha1":"48001732790c4e182848658fe1c833d05ec49066","sha256":"c81ea5686e94374f23dd7065b79ea600176e6d1cf215ce9386b729e424c86870","sha512":"64e48d866d1c0036af33eb83fd6c84117154e39871e7061427a6faff5790c79f8bfc1b86852207c6e90a11b2765bb910d3acb8a42363d37fec0499632a41fe8e","ssdeep":"96:dQYgiamA0Zl8DCK9cHoQYgiaiwQYgiaeBFZSQYgiawJQYgiafJc+uJQYgiacNUQV:jINClkIisIvIQI7GIDhClasCs/Aop","tlshash":"dab1bde5481e5044ff472c8263ce6d27de0ea3553494856dabfd0a9aacabc2232647cd","first_seen":"2025-09-12T13:02:42.56913Z","last_seen":"2026-04-21T22:10:38.48912Z","times_seen":1317,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":134,"dns":1,"connect":20,"send":0,"wait":34,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/agric1.png","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /agric1.png HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Nov 2025 12:22:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72237\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 290 x 197, 8-bit/color RGB, non-interlaced","md5":"88bf81ba2283576abaaaa2642a15023a","sha1":"9f2b2cd94b67538ad9371c2789272d1244f9c463","sha256":"f2c6326e749d1071650b85d5ee19d5ced0f9472dcedaf9cc3495753e804c837b","sha512":"12c9ca82f9eebfd59bf7ed6847b64315a04cb799fa7b6aeebf5525049c96449ee5db0e32bfbed671eb4870fd8ff6a370259c7ad32b5202bee1895b0655f34f81","ssdeep":"1536:StsPrG6IzVs+RLDo92cRnpI0DyvBM3LQ0elyBCR90AL4:MsPKFz2+RLDI/n93cTIpf","tlshash":"596301d225b700aa3a1033a426bfa5d0d7f35f38ae24f41242476be865170e67f70d8b","first_seen":"2024-08-20T14:54:48.620745Z","last_seen":"2026-04-21T17:59:20.830484Z","times_seen":27,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/4386397/pexels-photo-4386397.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 20:57:05 GMT","end":"Mon, 06 Jul 2026 20:57:04 GMT"},"fingerprint":{"sha1":"7A:33:B2:9D:52:27:0B:AA:9A:32:29:E4:97:F5:70:1E:54:B0:E0:71","sha256":"D4:8C:EE:77:0E:BB:EA:D8:EF:B7:34:DE:E4:0E:4A:27:BD:65:D6:F5:D2:27:C4:6B:D9:87:7C:B0:10:A0:F6:5F"}}},"request":{"raw":"GET /photos/4386397/pexels-photo-4386397.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800 HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100813\r\nset-cookie: __cf_bm=Xk1w_UbmNkuoICLc0WptlED3Sxx1NHr8WgbLE6AeVY8-1776794175.3708692-1.0.1.1-4NkrkoZBI3m_XVopvpaEuVo_dMSisyTqYjKB.vH9VfRklopPsdtEZuwiFc73LxijIIBFXz3EdN1aSVl1mKvl1FWLhi4kecNa2KT4NTtlXqm_JjIwxEUC7YUpnK5X4Doy; HttpOnly; Secure; Path=/; Domain=pexels.com; Expires=Tue, 21 Apr 2026 18:26:15 GMT\n_cfuvid=GnEsaa_gOJis1tDGgQI6ZwMQawzW6cXYFT37fQIy8fM-1776794175.3708692-1.0.1.1-QGHY94McmOjT.BkjK1osxCjqj2AAh1AaCt2uZg4d0Rs; HttpOnly; SameSite=None; Secure; Path=/; Domain=pexels.com\r\ncf-ray: 9efe43ac0d9875ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 21 Apr 2027 17:56:15 GMT\r\nlast-modified: Tue, 17 Mar 2026 09:53:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: status=not_needed\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: 9b716bbb23c64d6fb1af1a3da9eae3adefde3504\r\nx-served-by: cache-fra-eddf8230135-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100813,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x1200, components 3","md5":"955dffb0d2f8ee3d0f20942523eccccf","sha1":"b1c745e3a2fb8dc49e94ff9cefe9f850153beafd","sha256":"4f858aa6cb28a1c983e5153dddba1b7de061d365edb626ece56fc7f1b5322d35","sha512":"2ff5cd6327b76b1a3e5af9d858530b7871b950a733e873e6b7f9044510dbb5f56e25523ee8f7718970fa546b02713a76fdff116c7874da24aab3155f2e0335ee","ssdeep":"3072:QrydDV9Gv6qRPqXHjtpUIbO01cGHKJT1LgCZQd9:79GvoZpUIKiqJT1XZg","tlshash":"15a30237e31622e6c5f66e79193c57d850705a6e3b838a13bb2455038e113d82ceffa9","first_seen":"2026-04-21T17:56:52.221615Z","last_seen":"2026-04-21T17:59:20.887679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":86,"receive":4,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/download%20(2).jpeg","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /download%20(2).jpeg HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 19 Jul 2025 19:34:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5507\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5507,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 201x251, components 3","md5":"4ea3993b14733bfd1326740fc377bd37","sha1":"213246a67112cc677dc5d12b99fc828018651109","sha256":"d505e9953d35c7a53b620db5b10aa6cf5ded679980a63d7ecfa7dec7c4f80817","sha512":"4db5bc44381257358b2f41dec24d1de3360a009e39969ea4acfe0a2b5a70c925eda969cc4872b254333eeb6ca8094b9c58d5df53561e678f025dea543547bef0","ssdeep":"96:yWBG0B02BoI50BN1G2a5UX0wDvxmgLGiPhJzcypwZy9err:yUweqr1Gj5UL2GhGdY9mr","tlshash":"f2b18e3e126635e2db874cb13865074be349da54e46c27d40006e696c9e4af27ceea72","first_seen":"2026-04-21T17:56:52.222548Z","last_seen":"2026-04-21T17:59:20.90464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/ef9fe7c/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:18.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/ef9fe7c/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3431\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69de0593-d67\"\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-21T13:51:33+00:00\r\nx-node: m9-up-gc7\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10672,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10645), with no line terminators","md5":"0f87471a3d1fb33be6a51912861776bb","sha1":"8bb52b99066392f10ab336b980dfbe0b8fb4dfc6","sha256":"34e2fac9b502488543160a64f763a23608d196acf4dd0c4fecd57ef957572fcf","sha512":"a363d37884af6c3b20e287e9324a16055968acc28d04f79d7acb9b5f8a0cc67e7edf70d05495a9e9dbe14996e704484d9b710ae06e12bd6d87d9d68b515a54e0","ssdeep":"192:xbPfmk/7Obf14M6dOIpUTPqZ8BijFLeEJK:x7fH7ObdFWOIphZ8wjFCmK","tlshash":"a222d71ee7017f360fa613c3744f7b5376a480e592646c75d89c826943b9bcab217b8c","first_seen":"2026-03-31T14:01:24.495424Z","last_seen":"2026-04-21T22:41:55.034778Z","times_seen":485,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/gecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:14.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:42:21 GMT","end":"Thu, 28 May 2026 15:42:20 GMT"},"fingerprint":{"sha1":"C9:35:3C:67:F9:7B:6C:1A:75:01:2F:53:91:3A:BF:0C:5C:83:65:82","sha256":"B5:C6:F7:D5:1D:B0:DB:20:3C:D0:97:30:1E:49:F9:7D:91:DA:73:A1:80:3F:51:D8:F0:4B:97:4A:2E:AB:B2:77"}}},"request":{"raw":"GET /gecko-coin-price-marquee-widget.js HTTP/1.1\r\nHost: widgets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:14 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: 6aohiN1bwJX1kJZciQ/xMVECKqZvPtYamwzzxxFPPOe5Lktk0GjrVqfdANqzTZefzabO1B+UBa0=\r\nx-amz-request-id: 2GDD513S55NV1RMY\r\nx-amz-replication-status: FAILED\r\nlast-modified: Mon, 07 Apr 2025 09:47:03 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 2AuAGhn4.3R6BOwgNtUUbbtZSImOEdvC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 109002\r\nexpires: Wed, 22 Apr 2026 17:56:14 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"a7f64bdd2a7e3c1323490d64f335eea8\"\r\ncontent-encoding: br\r\ncf-ray: 9efe43a76c8a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":273534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33914)","md5":"a7f64bdd2a7e3c1323490d64f335eea8","sha1":"a491d1913d03e2b1af2ed624bde644162a6f7101","sha256":"0a6ceaf4c624607f7254d9db7684d244ed3617505359efa6e1306d8adbb273cd","sha512":"66c1738f2a7fab3aeec9834cc9aedc957e3348c8b1453bffae94478005b789dd705099bb166a11fd34a99e938ff5b47401804875cf89a830a0f198a83078d68c","ssdeep":"3072:O9MgZYwaOjzkT9HCij8Iv7RfjrnPLioRvQtdLjrUzpwIrGKD:CjnOEI1brQrPIaKD","tlshash":"48442a8df6c0f1a547f263e5606f2947b77a28f869888380ea31f4d5647e05c9532fac","first_seen":"2025-05-29T13:20:45.096448Z","last_seen":"2026-04-21T17:59:20.861447Z","times_seen":107,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":38,"dns":24,"connect":1,"send":0,"wait":29,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/static/js/main.068aa5c8.js","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:14.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /static/js/main.068aa5c8.js HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 27 Nov 2025 12:41:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 155376\r\ndate: Tue, 21 Apr 2026 17:56:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":539622,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"8878bff204fced433e5974af5c987396","sha1":"a2d452bbf75b3888783a54a0645f630db951965f","sha256":"abda02af2e586a4b7836e44e88b7a07ee615f6133266f213aa59149bc31d9fcf","sha512":"6b1011268e894d111eb51895dde62da2902989b61b562ad7b65e4af0c5fb33cc9b0d5aa405c3b9337d52fcc8fc4140c9266db671a45cfda0907ce21c472382d8","ssdeep":"12288:3mQ0NN5ZmxmV3qbyCPdmcPBd2Kx+AK9GW4FiH2k:f0NN5Zmx3byCPdmcPL2Kx+Aa4FiH2k","tlshash":"5fb45b8a7150f265abf301e6407f4505733a1a5e740dc8a4b178fcda68a888d727bfbd","first_seen":"2026-04-21T17:56:52.226948Z","last_seen":"2026-04-21T17:59:20.805773Z","times_seen":2,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:14.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://autoproftrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 22:33:37 GMT\r\nexpires: Thu, 15 Apr 2027 22:33:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 501758\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-21T22:09:52.49282Z","times_seen":151186,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":96,"dns":0,"connect":21,"send":0,"wait":22,"receive":29,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/634054c00f602044abb3060d/65420f31d0dca45622658cfb_NEXT%20100X%20Crypto%20Millions.webp","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 04:21:54 GMT","end":"Sun, 05 Jul 2026 05:21:51 GMT"},"fingerprint":{"sha1":"01:0C:14:4A:BC:A8:74:FF:AB:42:F0:82:53:F6:FC:F8:0A:DA:9E:61","sha256":"DE:0B:A2:CB:B3:13:8F:13:F5:23:54:3A:95:01:72:0C:79:1C:54:C7:EB:1C:F0:00:21:CD:6E:2C:15:0A:B5:07"}}},"request":{"raw":"GET /634054c00f602044abb3060d/65420f31d0dca45622658cfb_NEXT%20100X%20Crypto%20Millions.webp HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73832\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-amz-id-2: zPQay9ONfcEUwdfm1Fu5eGx5W4WNwe6ggKCxmQs75MO19qt0oTus0NPvZM7dORgW1iHmmoKkLqQ=\r\nx-amz-request-id: G170KA5P62TYK229\r\nlast-modified: Wed, 01 Nov 2023 08:41:23 GMT\r\netag: \"7e7c96405723167d16294436b6033609\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: 3LbuuXe5UrwMfo348TYga_dKvwCz4qwI\r\ncf-cache-status: HIT\r\nage: 1866274\r\naccept-ranges: bytes\r\ncf-ray: 9efe43abb8eb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":73832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e7c96405723167d16294436b6033609","sha1":"db7b24de17d667c88fbf29c434f0465cf4d5df2d","sha256":"b305776867b3f1b4a438f8920a104a2353bf400c1ff5fc925fd8795d221cde4f","sha512":"40dc9e614a8cf7c91e277eb8d1fe4c060700031c3f90284110462e18bc701ecbb8e3ab695d708ec1b693d9805b5aaa72cae654a0d4aa34b5dc76b5d1b680bc8c","ssdeep":"1536:kG9bxU6Y6l01f5e/EblzV6zrLGJuh6g8RK85BzZzkAGidU0DtYH7JsUqY:kGpxUBf5e82z+U/UKczZzkidUT7b","tlshash":"0c7302303b7a935eb6b0f0f8f1c7bdc93993c23caf2a4457ab195518776836491845d0","first_seen":"2026-04-21T17:56:52.228398Z","last_seen":"2026-04-21T17:59:20.840985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":98,"dns":19,"connect":1,"send":0,"wait":19,"receive":3,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/4386370/pexels-photo-4386370.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 20:57:05 GMT","end":"Mon, 06 Jul 2026 20:57:04 GMT"},"fingerprint":{"sha1":"7A:33:B2:9D:52:27:0B:AA:9A:32:29:E4:97:F5:70:1E:54:B0:E0:71","sha256":"D4:8C:EE:77:0E:BB:EA:D8:EF:B7:34:DE:E4:0E:4A:27:BD:65:D6:F5:D2:27:C4:6B:D9:87:7C:B0:10:A0:F6:5F"}}},"request":{"raw":"GET /photos/4386370/pexels-photo-4386370.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800 HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72331\r\nset-cookie: __cf_bm=mXuxQHw1hqlcXlcVgOybi6_BjhZzaWn7FxCT5Iln8zg-1776794175.3480668-1.0.1.1-aHBrCvpPoK1ZQD23THp7b7IZivWF2hRJSEyFYkAhwEQkJOBo2VqjtyxfXvjD1pWDLa_PclbzZACxdrqkyMh7yQBxnUosUmJlj1CCk9Mt6Z8KlgJWBGxZaxi2jfdi9yPt; HttpOnly; Secure; Path=/; Domain=pexels.com; Expires=Tue, 21 Apr 2026 18:26:15 GMT\n_cfuvid=9qmbXdxy67DYS61LU3I7DXUb6.C5iZSBiLIWr.56G.U-1776794175.3480668-1.0.1.1-ilybEql.3MhaTkR41Ibhwj_epe8y_IfmO53tMy5CaI8; HttpOnly; SameSite=None; Secure; Path=/; Domain=pexels.com\r\ncf-ray: 9efe43abed5c75ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 21 Apr 2027 17:56:15 GMT\r\nlast-modified: Mon, 20 Apr 2026 13:52:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: webp_bigger\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=1;i=?0,cf-chb=(801;u=3;i=?0 8114;u=5;i=?0 41059;u=6;i=?0)\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: 612ca51253273afa6fac0813589959644065410e\r\nx-served-by: cache-fra-eddf8230026-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72331,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x533, components 3","md5":"8ed9be821ed4594b6f4dc20f677c4f30","sha1":"084bd1fc6e0ee60406fe225d7cea57d3959fdbfa","sha256":"a6210802f9a00fe2cc9e94c42ad4908f32c0b14e19fe419251b516da0aa37330","sha512":"23a7b80abf84a4b82a5fe158b113d04c8d9c8d1af6f5cc3398a3f25ca0a18081566864703bffb9aa65980d619573ff8254d9c8ef9f3af68a3be2d1225bc0de8b","ssdeep":"1536:+6PfBsHNaVKdHBrAf6OCCKVPrA+o7ioc/ObQEl2x81F2eYEV04XIbWgTx:+6X2NXlA8NVPEX7iocmbVlr/Q44bWgl","tlshash":"076302a098458c49f0270970f2891519f3f369c3fa2faf675435928cbf931e2296587f","first_seen":"2026-04-21T17:56:52.229369Z","last_seen":"2026-04-21T17:59:20.818618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":12,"connect":5,"send":0,"wait":96,"receive":3,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/rZFtMbvxR2","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:16.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/rZFtMbvxR2 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://autoproftrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:17 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 719\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Tue, 21 Apr 2026 19:56:17 GMT\r\ntest: azazaz\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc31\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"4265139b7579824efb1bee962a4f257d","sha1":"28f73334b23245c795bfde16eb7403e3241e5649","sha256":"5bc62de8406e72d36d97e61ace51e224925e6aeb5d8e07f7e19346100f551e47","sha512":"b6ac40f3960398fcd019044202dd5c211e1fb2379fbc5a9b53e85946e91ee5089ab67db2705bc39d2dbd4b54b2cf7f9137026e8c1028436144b19ae3a988e337","ssdeep":"","tlshash":"1e2111e64c48686b0a867e87a16bee17393c82a6ee814f74cb989d2c10563d5131b60a","first_seen":"2026-04-21T17:56:52.230415Z","last_seen":"2026-04-21T17:59:20.858005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":972,"timings":{"blocked":289,"dns":1,"connect":147,"send":0,"wait":392,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/rZFtMbvxR2","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:14.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/rZFtMbvxR2 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6194\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69de0593-1832\"\r\nexpires: Tue, 21 Apr 2026 19:56:16 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc72\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18118), with no line terminators","md5":"bc36f9b94a67eb56edaa3da5e250a105","sha1":"4945c36abe783ea673212487adfdd2260031dd5c","sha256":"47057cbd0c948be21fba80fdc675d5da2d4adaf86e78115733dc75832769786a","sha512":"fb44e5e62125b354d76e3e79c184e2d936a3730e1038344f9d3e683175c7849d84001a54f45b321c80c5a7e41d5aebb5a762292bbc7c2ae6803aaa28c8663242","ssdeep":"384:boU+JvepohmPF0jbrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI/UAjX54cr7sXWcPdv","tlshash":"a8823b6e7959b97743b218b9516f6209733549ebd404c920a401e98d7cb8ace813fef8","first_seen":"2026-04-14T13:34:30.591514Z","last_seen":"2026-04-21T22:42:09.296627Z","times_seen":736,"resource_available":true,"data":null}},"time_used":3539,"timings":{"blocked":1669,"dns":301,"connect":156,"send":0,"wait":195,"receive":6,"ssl":1207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/static/css/main.35cbde5e.css","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:14.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /static/css/main.35cbde5e.css HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Nov 2025 12:41:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 26376\r\ndate: Tue, 21 Apr 2026 17:56:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":169337,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62980)","md5":"4dd673df636071fc731026792805a46b","sha1":"9bd3515a37a9f79f2e1ae550e9b0e67206f59ccb","sha256":"261aa98b4c0e9edb27c7e6e41fd546f23a54d7a29ab3578fc131e2c8ea40f32f","sha512":"8b2e33a4ac7fd38569b7a4fd7843230048fcd161dc3e147e537523b2f0835cf795e9ea6f1950795152ab437951cc32547a0635fcbcd2160f25c0b6b49d0573aa","ssdeep":"1536:1Fj81IFPJD8LOsc+QAP3ILxAjujj/mZjblpU0UvDfFawWgUipUwRET5yZ03fIJsO:1FjqIFPJD873uxx/KPbdwRDnK56","tlshash":"baf3ecede24d04d13732c896eb75b78e60a9f6bad5814d85f81b500deec36a102c5fb8","first_seen":"2026-04-21T17:56:52.231904Z","last_seen":"2026-04-21T17:59:20.896296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssir.org/images/blog/Lamy-Leijonhufvud-ODonohoe-next-decade-impact-invest-592x444.jpg","fqdn":"ssir.org","domain":"ssir.org","tld":"org"},"ip":{"addr":"172.67.200.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssir.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 10:47:30 GMT","end":"Tue, 07 Jul 2026 11:43:49 GMT"},"fingerprint":{"sha1":"74:60:4C:22:31:E8:D6:87:A5:1A:BD:4C:A6:B3:E1:A6:DD:35:4E:B3","sha256":"AC:E5:8D:67:A0:D7:EE:F7:4D:79:A9:9F:8F:94:CE:E8:06:6B:1A:0A:BA:90:4B:C4:E7:FD:C6:2E:8B:16:4C:E1"}}},"request":{"raw":"GET /images/blog/Lamy-Leijonhufvud-ODonohoe-next-decade-impact-invest-592x444.jpg HTTP/1.1\r\nHost: ssir.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 114391\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Mar 2021 19:09:57 GMT\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\nvary: User-Agent\r\nx-cache-nxaccel: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUoS6W%2FdD3fHACg4A4T7AoMMaUN%2F55FhYRHKsSDQUyVWXfd91l2GVFywd5k%2F4c9OlnjixbJ2YkTpdMwXEjoOvFLUIcjgZfE9baR0ZEmMIc7JKM5mdQXmk0YAKA%3D%3D\"}]}\r\ncf-ray: 9efe43ab1ead568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114391,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 592x444, components 3","md5":"dbf37055cb09c1f077218a53a835cc49","sha1":"a43e3aae9bf5a10070002b9cca70d313f468ffdf","sha256":"eca8bd771134ffd84238a7dd6a79e2b2a5972d7e0142c0f6777cd8d7ad087822","sha512":"6136c2ca9105a2c505ffb1ed1f64182e81b3c43dcc812aa8d6c58c325a1203958d37d788cbd6260e36624299790ba917a01c9185f46ff8bf33ed85dc040fc431","ssdeep":"3072:Pf0+GEhrC/E0p6FU+LU7BILagJpTTJTVRCLzl5qBjx9RGn1:d3U/XDtkacDTC3ojhGn1","tlshash":"44b312614eb299a0733c987fd237ca1e770152862a816cf52a3c9fcdcb97d4b076521a","first_seen":"2026-04-21T17:56:52.232775Z","last_seen":"2026-04-21T17:59:20.89691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":541,"receive":345,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/439391/pexels-photo-439391.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 20:57:05 GMT","end":"Mon, 06 Jul 2026 20:57:04 GMT"},"fingerprint":{"sha1":"7A:33:B2:9D:52:27:0B:AA:9A:32:29:E4:97:F5:70:1E:54:B0:E0:71","sha256":"D4:8C:EE:77:0E:BB:EA:D8:EF:B7:34:DE:E4:0E:4A:27:BD:65:D6:F5:D2:27:C4:6B:D9:87:7C:B0:10:A0:F6:5F"}}},"request":{"raw":"GET /photos/439391/pexels-photo-439391.jpeg?auto=compress\u0026cs=tinysrgb\u0026w=800 HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 84319\r\nset-cookie: __cf_bm=v4kLTU.rLz526gSilJD9SjHi4Cd.xEdIdlGS_Qkcbkc-1776794175.3697226-1.0.1.1-DVjkM8FL_ZXxCckjt8raKbprSYmCRt13.6ybbAel62SOzJM9nf77DuctBqckMSaK3DdOVJ_G0jnsTti402tRpsKavgmI4SMpFyXmZggQSl2ONXZHZ9sHoGFxYzGSRz9A; HttpOnly; Secure; Path=/; Domain=pexels.com; Expires=Tue, 21 Apr 2026 18:26:15 GMT\n_cfuvid=fwcrALK9c7EuWnIgwCpGuO5.xPfweaKmyz1xja4sWrQ-1776794175.3697226-1.0.1.1-lviphHy.bdL1cVnttNWmAwAZWYkTLAvDicMiUbbzSGM; HttpOnly; SameSite=None; Secure; Path=/; Domain=pexels.com\r\ncf-ray: 9efe43ac0d9675ab-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 21 Apr 2027 17:56:15 GMT\r\nlast-modified: Sun, 15 Mar 2026 17:11:04 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: status=not_needed\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: 893c695e4fa6dee063fab933d968d441f601f1fb\r\nx-served-by: cache-fra-eddf8230057-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x600, components 3","md5":"671d8aa792d1fa3a64a3b57f0fb61c16","sha1":"49364444081a27769ed5ece682a7e740a0441046","sha256":"33c5d899739cd66d431a0c7d2d901b60eead2f84f77a4cf84749256476f90c1b","sha512":"e1afd7b7bd3d5c9158950fa06948e07bd2359e2db85ed055ee264fc9f315a0b714d2a762a0f9f34a308ba60e58fb6a6b330aa1a607005dd1032b3bdbe4ee51ab","ssdeep":"1536:ieFniUYjTu5e4tBuplByUIDXF5rER3DnQ8g+ydw2Srs1c1WOQ1U:LFniUKPpAV5glZP28VHR","tlshash":"9f8302cc5e059607e2360a7ea84b5b37a39dcf03ab73500b75b75b6c677c1a8c342188","first_seen":"2026-04-21T17:56:52.233812Z","last_seen":"2026-04-21T17:59:20.874945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":94,"receive":3,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/oil5.png","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:15.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /oil5.png HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Nov 2025 12:21:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76165\r\ndate: Tue, 21 Apr 2026 17:56:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76165,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 290 x 197, 8-bit/color RGBA, non-interlaced","md5":"ace3dcd17354ed9c85a382331ea011a2","sha1":"ec6d2b6acc2b2b4e47934872c066e046c82b52cc","sha256":"e7c2769a97fc3fc98b66284627eb5f999122319f5a5ffd462e52f9096443265d","sha512":"81562ca449fefbac4b8f937d826e3b244dbd29936737d8d334f90d4b27123d51aacc94b58127be5bdc10d468139e53c450725cac7c8fc0a6bdc569cf9aefa153","ssdeep":"1536:fO1I0jPdO3s0uC8FBy7F67NfyZ4pTJlswwh8TA+qy0XIIHQoiZUOD:fgI0O35uC8e7s5yZ4zKwwh8TE44QvZUO","tlshash":"0c7312f4c248626905df3c5220a61a6f833010b65dfb4a1f628f4fe9f36910e753a91e","first_seen":"2024-08-20T14:54:48.619663Z","last_seen":"2026-04-21T17:59:20.832562Z","times_seen":27,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1776174542","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:17.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1776174542 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 341846\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69de0593-53756\"\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-20T21:37:19+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1549192,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e65f2c7a3f9ae403172c361239b6148f","sha1":"a581e66ca2d069253183ef0aa358bb27bcec33a7","sha256":"59d650389f7b09ad4bff086ffed009298381e5845b08d882ea7a39c69ebd8e52","sha512":"1f64d5b0e0e7410ec1f14f630c8c12c95db3419082d87b651652026320689a50e144b89c743b10f751ce9811c0b6ee8463c576513dca2e0e6e0aa66d912379d5","ssdeep":"24576:DcdR2+482k9n4pzCuZlhEacrkPGukiE8SBC2tzPSF:DcdR2982k9n4pzjcrkPGukiE8SBC2tbi","tlshash":"43254ac5b1c1f46502d355e6643b2009b23b285e3809b064fabcddcbfa6659e6233f79","first_seen":"2026-04-14T13:14:24.867791Z","last_seen":"2026-04-21T22:42:09.310274Z","times_seen":675,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autoproftrade.com/logox-removebg-preview.png","fqdn":"autoproftrade.com","domain":"autoproftrade.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:16.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autoproftrade.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 19:18:22 GMT","end":"Fri, 26 Jun 2026 19:18:21 GMT"},"fingerprint":{"sha1":"C0:30:50:3A:A1:2D:F4:4A:9C:FC:FB:2F:A0:84:9B:79:35:98:03:73","sha256":"82:98:30:3E:7C:EA:90:24:A2:79:B9:F0:EE:39:1E:C1:6F:8B:09:55:03:C5:7A:61:97:47:1B:78:44:C7:E4:43"}}},"request":{"raw":"GET /logox-removebg-preview.png HTTP/1.1\r\nHost: autoproftrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 17:56:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Nov 2025 19:01:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48714\r\ndate: Tue, 21 Apr 2026 17:56:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2358 x 401, 8-bit/color RGBA, non-interlaced","md5":"0faca9ea145af4e4dfb1661651f32d08","sha1":"1ec86d914f72aac90f2fe15f0516ae07519ab4ad","sha256":"948d42dfb52f21790c6b5ef680046f6d37a18f41ee61aa353af19a10d6235f91","sha512":"dd82d2700ec768261936ee5dc8deab9eb406c0088f283feb22aa5fe3c98d6046e32d6520041ed29a09512024b6a41c41137cc848f7a5e1f1c07f023b507b208a","ssdeep":"768:S/DZO+5hJ+Mo2fIgYyjSr5BejLPKg4q50q5L/kMszl9R8nCW3aw1o:SLoTMo2AryjmmjLPKg4q5rol9UDp2","tlshash":"0523f1922845d5a0c7839f37dd261bf0d7f9026800c99ba49ab1173bcedfb487546de1","first_seen":"2026-04-21T17:56:52.198196Z","last_seen":"2026-04-21T17:59:20.810802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"autoproftrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://autoproftrade.com/","date":"2026-04-21T17:56:19.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://autoproftrade.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 17:56:19 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69de0593-eb0\"\r\nexpires: Tue, 19 May 2026 23:59:56 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-19T23:59:56+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-21T21:21:00.132946Z","times_seen":13574,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
