{"report_id":"0c944a90-699b-4e3a-8917-e3b474c96003","version":6,"status":"done","tags":[],"date":"2025-07-09T07:26:30Z","url":{"schema":"http","addr":"mail.forextraderinvestment.com/","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"title":"Best, Secure, smarter, effortless way to invest in cryptos, stocks, forex and etfs |Forextraderinvestment"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T07:26:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-02T15:13:13.4762Z","alert_count":0,"request_count":3,"received_data":36533,"sent_data":1480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-02T15:09:46.390069Z","alert_count":0,"request_count":8,"received_data":235637,"sent_data":4460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-7.jivosite.com","ip":{"addr":"158.160.20.111","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":0,"first_seen":"2023-01-20T06:33:54Z","last_seen":"2025-07-02T11:32:22.796261Z","alert_count":0,"request_count":1,"received_data":633,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":30079,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2025-07-09T01:48:59.416244Z","alert_count":0,"request_count":7,"received_data":1273489,"sent_data":3465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1005,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-07-02T18:30:05.50863Z","alert_count":0,"request_count":3,"received_data":224085,"sent_data":1774,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-07-02T15:22:58.044151Z","alert_count":0,"request_count":3,"received_data":25254,"sent_data":1648,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1156,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-07-03T06:29:32.351508Z","alert_count":0,"request_count":2,"received_data":80995,"sent_data":972,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mail.forextraderinvestment.com","ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":72,"request_count":72,"received_data":3595084,"sent_data":34773,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":12905,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-07-02T15:40:58.684302Z","alert_count":0,"request_count":1,"received_data":58240,"sent_data":457,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/jquery.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5790ead7ad3ba27397aedfa3d263b867","sha1":"8130544c215fe5d1ec081d83461bf4a711e74882","sha256":"2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0","sha512":"781acedc99de4ce8d53d9b43a158c645eab1b23dfdfd6b57b3c442b11acc4a344e0d5b0067d4b78bb173abbded75fb91c410f2b5a58f71d438aa6266d048d98a","ssdeep":"1536:5P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLNFoqqhJ7SerN5sVI6xcBgPv7E+nzms9d:A4Ud4qhJvNPqcB47MfWWca98HrB","tlshash":"7793d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","size":95931,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-04-05T12:47:22.047883Z","times_seen":16256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/bootstrap.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a2d5ae81820dc9895484dc214ada159","sha1":"5f63a0ba279d8e0077c64c15c80f0a21cf8ab616","sha256":"f761d9b468bde1b761d51ba2b6848345a0d5497348098f3e395e663cfc993157","sha512":"29b62c3cfa25965ed17a33d335b7215541f42e953c11927493dba8dc4c6a556e2d80ea00a3ca4651314f688983cf9515dd9f2d8c86eccd19f630a07006007fb9","ssdeep":"768:t1Ye0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:t1c+U2QK+GM4ZIwwoqq","tlshash":"3443b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","size":55779,"data":"","first_seen":"2023-03-10T14:53:48Z","last_seen":"2026-04-04T15:17:54.625089Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/jquery-3.3.1.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"378087a64e1394fc51f300bb9c11878c","sha1":"0c3192b500a4fd550e483cf77a49806a5872185b","sha256":"4fe68fa216176e6d1f4580e924bafecc9f519984ecc06b1a840a08b0d88c95de","sha512":"9a2c70516ea0c8c37c7f072f214de0afd5ddeb643c6b5d3fa8ade3ef8d2ce40bdf8b1b1194bad296e9075562701ee7dae48b18144b1cd2d735328be5a3accbe6","ssdeep":"1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6ta:+kn6x2xe9NK6nC6E","tlshash":"208319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86929,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-04-05T09:54:08.770254Z","times_seen":4019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d87afb77c3253c2213588eaaf2c8b06e","sha1":"071da4caa121573c25af9ae2269b488ca2b09f42","sha256":"4248d90db7023381699d8edb5a46456e1276f75e1654a6fd3ecb530b021085d4","sha512":"dfa517d46e3435e58265e59ecea23fe5adfbac2a90e2e1f4fd3c40a7f637757ae768a6d8bd66d88081927148bf0fec91c14c87da9d9fe4a03e1966d3d71018dd","ssdeep":"","tlshash":"a4114cbad8b50ddb2a5d25b151ba2a0330a141db4d9c3c467b0c0e4c2fdec3e6d7164e","size":1001,"data":"","first_seen":"2025-03-13T11:38:42.218677Z","last_seen":"2026-04-05T12:36:25.533723Z","times_seen":823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb381e2d19d8eace86b34d20759491a5","sha1":"3dc9f7c2642efff4482e68c9d9df874bf98f5bcb","sha256":"c8370a2d050359e9d505acc411e6f457a49b21360a21e6cbc9229bad3a767899","sha512":"abb2ad8b111271a82a04362940a7ab9930883ecb33497a1c53edcdc49f0634af5bf5b1bc7095bd18db26d212b059aece4577f85040b5f49c4982b468fe973c12","ssdeep":"1536:+vnXSI+9Escogo5uW8xbm5sIacSs0DEHUjnqTDUBu6VCdZWa:w8gdzIF0oDUstZX","tlshash":"b743e8d972c2753247eb6029347f930af2b664aa294d8454f078d8e5bdb0e04987bf7c","size":57254,"data":"","first_seen":"2023-03-07T01:07:03Z","last_seen":"2026-04-05T12:33:45.637011Z","times_seen":4085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/wow.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"21fe90eedcbaafb4ed529d78418d30bd","sha1":"a16375b80220d315151f57bab2d4ee03c9fe1d20","sha256":"7852a22b72ead62cfc4a1b1ca32874b3e222f232a991a6d1432313572f534135","sha512":"30be63048c2b41ea7953dbc137b4c9047704196430cdf1995334092a41fe8c6336f1f109c195c5b47c857ee92838e4ff8d255d7ca8b8280793bc012d35b7fcdf","ssdeep":"192:tmEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:EEE/Amu6qUxVBxGkAI///IR","tlshash":"99f1baa5374a70718e9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","size":8155,"data":"","first_seen":"2023-03-07T01:37:53Z","last_seen":"2026-04-05T13:17:10.877748Z","times_seen":4716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/main.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e71a7d607fe308a96a6ff97960861cb","sha1":"7711c4db34de8b7b1548abecf645d4ff51e430e7","sha256":"8a58750e8d99eae713706c45a1b140a69392c8909c1531bebea80b1d8c35bdd7","sha512":"ff95cbe90d5c1f2b82526094a0e153df07c9560f4cbead3f51e8cf11ce70e2d8b38f01a3bed65fe6c63356c5c29d13afed66ebabff57ff36a55429140db39b86","ssdeep":"96:UFwaBBLBRUVjCqvvBuVpC4KWBbEFsHEp5q5bk5Fgooz:UF5WVhuVQBWu6Tz","tlshash":"06c1cb1ab01129a564bf7336da3ba504ef7e0227c3054f20bafd18991f7019476a3ede","size":5883,"data":"","first_seen":"2025-07-09T07:26:46.547286Z","last_seen":"2025-09-22T11:56:20.964323Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/contact.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"657298a9499af9178811ce14621a5252","sha1":"9afb28a34ecffc3a50d239d27a6af0efd3655a6b","sha256":"91b9c7280f9dd56adbe83a75bb5c07ade2a149b0184ca577be32523ed97c4bfa","sha512":"c5bc39bc3efbfdc334517da16019a08a714d69b2d09dca66c7cf5688e84826490172f5d6d8f763ace1b171a56fbf1c71ff17badd5afe82c05519800222dc4f73","ssdeep":"","tlshash":"5f512805ac981fd98637a77ab2f29721ef1e511fc6050e52f86c189c1fb0d887912f4d","size":2567,"data":"","first_seen":"2023-03-12T17:25:02Z","last_seen":"2026-03-28T05:10:54.823201Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle_en_US.js?rand=1751979741","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ae362620b0ecece5c78f39ba9320b20","sha1":"5b6fdb4a3244dc614c075063849d273e5dfcb750","sha256":"b8c67efc77ff65cdbe232f9a63c444f1146adeb8f36cdf5b9d20987b5d24bdb9","sha512":"3faf16c29c72af16bd3124870dd1b0c56a0ec3b0715c17f8fff7f26083c1e860abd0520bdd323c063b007ec593620cbaba46271bdd803268d31e796d6450d489","ssdeep":"24576:D4+XI5Q6t0phsjn4PuyYycjubSsVdOlkGO30ezHpofauDzHGIOjr6:DBX7hsj4PuyYycCbSashOEezHpofauDf","tlshash":"b5354ac5b1c0f46502d355e6a43b2009f23a2c5e7809b064f7bccddbea6659e6263f39","size":1124664,"data":"","first_seen":"2025-07-08T14:01:05.521029Z","last_seen":"2025-07-10T14:45:31.595819Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4567ea9d074288760eb5c148c28ccaf","sha1":"e4aaa95288b6587f0c7741c25c6dfeb0261f3be5","sha256":"ef89397a95acea5a3859c115d928ae77d3db5ba48509149da4d7bd1b6dd6a6e2","sha512":"d59ea9f470e2d68795ec2a357ee79b565209c35e06b7d05b6a037861c3fb6f687f7699e24e455c732acf0d6d672e65689859510550e75909b65dd05c70344d6c","ssdeep":"24576:aKSBUTQy5eIlJtELigeILxwcxuCHveqqqnCeQQqqBRKF7kU7XI:ajB0lbELigeILxPxuA+qCeQQqqBRKF72","tlshash":"f3354bc571d1f8a907e355e9943b2005f23a2c2e7409f064f6bcdcc6aa5658e6277f38","size":1098817,"data":"","first_seen":"2025-07-08T14:01:05.545051Z","last_seen":"2025-07-10T14:45:31.605914Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/slick.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-05T14:45:55.266867Z","times_seen":77561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/m6KjK04WZh","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcbaa046c3c413a9222dc4182c2204bf","sha1":"dde480a9765518036b96d4d6c7a01517eaeb8e12","sha256":"306ed5c6c3af6ab962934b9acebcf18d7e0ad29a5821bc079eeb97c280658bc2","sha512":"ff96f47f29c56522c707c086853c51dab56d8697e6a4704dacb0cb7d2dd907f5dce007e10fb6bd9ab6fc2b094e6118fe40096707ab84725532384d612f044714","ssdeep":"384:boUJJ1QY4mmPY0prAN3JyMiqwIlEeJMz8P08wIbqWcPWv6:f3ypAb/9DPpWWcPA6","tlshash":"cb822a6e7959b93743b208b9606f6209723545ebd404c920a401e98c7db8edf827fef8","size":17761,"data":"","first_seen":"2025-06-30T12:26:00.73539Z","last_seen":"2025-09-07T19:58:35.343262Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#220","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-04-05T14:20:24.545266Z","times_seen":27839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/js/jquery.bpopups2.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c66bcbac07789e771117f9026eb95dcf","sha1":"57e13328d9e8454c4d4be4c1606a56142892687d","sha256":"515dca9eb34967b766e29c06565df12a77a14864e4300467dd718b4e2d4d3b46","sha512":"4cb2f73029e5d0e7e8591e0e2b23660b8db3385932774c5f99d9c915196fb79f7d6c5864921041a9a952f2e9a08be9d554c249fb32f36b98217518bd64e078cd","ssdeep":"96:zOymOUD/TaNtyPGMEXidmdVUimKlKmwgqoxzy3R9:zOPO6WyPuideFkDSxzo","tlshash":"54d19469756a7005a47b727e56af450f83205267bf234d20749dc8ec5fb2b8532a2f4c","size":6229,"data":"","first_seen":"2023-03-07T14:58:38Z","last_seen":"2026-03-18T17:03:09.863773Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/jquery.countdown.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"041ebf68974409d8ea26ed60bf6a27fd","sha1":"68e7411a5c5a6bdf80cea5038ef155326a78316c","sha256":"8da7b0eeb54bb48a76f221e813cb76a40d40fc9f564405b4cdea677243288309","sha512":"0228fc38967987ad21989320f9a6aee1a7662e3b3066407c67b59f5e5b10627a8216f3f9fcd89e84c1994365d4aa28b82be6f70ac3c863403ad66948e5282b03","ssdeep":"96:GBXpuplQHIwcCeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7/:rQH9UpxGhdBqztJxMxHxqxAxixw3xexg","tlshash":"05b1a5ceb3b223d508e553a201ae1116a23bf15be4d6001cb5fceac87a75c9d606fd78","size":5371,"data":"","first_seen":"2025-07-09T07:26:46.608723Z","last_seen":"2025-08-08T07:31:51.744521Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/menu-spy.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"da4eb2281844112d81280b17d2014364","sha1":"10782d346c534fca69a410cd0194a892aa64dd2f","sha256":"b003be7b0627b15271829a1ce53bfb51512a5e20bf42fb9844cbbcfe48b8a60a","sha512":"d568e428b2c8ab41606d1410d9a198ef5910d3565929e7c18c6f834c778742d55014b0688765d41d8f8fb6cae0532f74508a277e2698f9a5909f04a47e30910c","ssdeep":"","tlshash":"216133ce7200397942d7e2e5426f174eb23b745f744a109cb1649ce65a3405f92b3bbc","size":3205,"data":"","first_seen":"2025-07-09T07:26:46.554086Z","last_seen":"2026-04-02T11:14:10.509517Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/script.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"470c7933aeebbdd7c846390c8d4073f6","sha1":"ccb70086d99f31f3c545c2550fb7c700ebfee8ae","sha256":"f2af295712fc6ae4e25bf1f323841cc9ad71295c2aa899c065daba5e4ca6bbc6","sha512":"0dad005afebb87fbf2760c3ad5713ee58e80d5a14dd938ef999134dd18dee79a262d4f401cbb98708e25a31b6d27ce0710db31599fe99103c3b889eae83dcf3d","ssdeep":"384:nCCoEdoDHeq1chSDgGG1O8Gc5endhi6Wqu:CCocowHr","tlshash":"5e72e8587f707d1446fae16160ce9bccf27e90629a62c828b310788e499dca4177ff67","size":16351,"data":"","first_seen":"2025-07-09T07:26:46.619885Z","last_seen":"2025-08-08T07:31:51.73191Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-05T13:14:33.255424Z","times_seen":2671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bc10c35f777c464fd942fbece3deca7","sha1":"633a6c3d51fa145c7351b3df6976dd36bd32e609","sha256":"029a617eec7b8daa37e97c2225ae92a94e3ce2aed4db95bd36f27e727865bb6a","sha512":"bfe0aa7f6d2fbecfb9250ad5d877c000035ced3f9e537f75ec8cef0dab876070f96a774a5485e06369010d84fee6868d29a5613b01aab9c17844e92341e6f86f","ssdeep":"","tlshash":"47e0c00577c1a15143a134124dee108018d4f1970d05fd10374c84d0cfffe9cf46a6e9","size":388,"data":"","first_seen":"2025-07-09T07:26:46.627614Z","last_seen":"2025-08-08T07:31:51.807702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7088bb54ac27e04c13be15ffdee80b6","sha1":"09630cc040fb56110526507170a20379983c48cc","sha256":"d072d6d0ac49cf76008d9a1ee01017975532be79688c47865d0d6a6a4b3b51e4","sha512":"83990c4c45fb192a5c4faf2431dd45fa2676de68c4d548cb8921258e32873663bc8de613ac88497649911d11daaeb4a3a72f77c6d9ee81a47afa6a554068c619","ssdeep":"","tlshash":"61a01214e4bc310108332090013f050c172960052084a10094ce23c40fc17164d72009","size":79,"data":"","first_seen":"2025-07-09T07:26:46.628501Z","last_seen":"2025-08-08T07:31:51.809119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.244Mib_Mqu4.O/am=AAAC/d=1/exm=el_conf/ed=1/rs=AN8SPfp2YCs3RIwUVesTMcvDryzdZjmeKQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"924548d1f97f5d62705738131ad69b8c","sha1":"a5346f6c4b2520381e47aa084220f5a4b0da87ce","sha256":"1afb404248c137c2190c4612a050850771600d66bc8770dd9a38fd8c9d368e9b","sha512":"529d8055b5cde02a76d85fc84d9b0484d280eed595615307c72157587228bc647ae8395b1c7c88e9ed7eeb7a1ebb9309b1a96a15317ed5a3f73726c60fa35825","ssdeep":"3072:5rMDn3JrObS4XsGq12nDWCIVrurFJzMT/buZxbF99km9/oa7:anuRJQA","tlshash":"7f24e7d9b25270679363f4a6517f000eb13b586af8484d6cb28de8e2aef49190177f7c","size":221222,"data":"","first_seen":"2025-07-01T20:52:11.899642Z","last_seen":"2026-03-10T04:57:46.997573Z","times_seen":968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7bf1359aa18e80f7d101e885289f7d5","sha1":"653d757c6f7227714340323eba367355271ae144","sha256":"3dd607ae38621f2caa746e07626bfd61608c9189f4fffe2710fed9457ce4969d","sha512":"97eb52aae2bd8036466b38b2dc79922290116ce7e475183624b9907d959d8017c1b5f3a0508d5dd2ea96968c8c083e20129e21f6d82a596c7afb28b663eea8da","ssdeep":"","tlshash":"42800080bc22caa3203803203222f228a038220038c0f8c020a080002000b8bbc802e2","size":29,"data":"","first_seen":"2025-07-09T07:26:46.62928Z","last_seen":"2025-07-09T07:26:46.62928Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/_/translate_http/_/js/k=translate_http.tr.no.244Mib_Mqu4.O/am=AGA/d=1/rs=AN8SPfqC0Yd7CwSzKW-6E0SZ6rH4C-82Aw/m=el_conf","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc8b23b3c4a8673edcb1377017676772","sha1":"8f253f3f66e8bee386b465e7b339208f770de642","sha256":"7112d799a5117183b7f965d1eba4e2c5c8c6cc30a62c22ffb71ba4e69f46919d","sha512":"23777c7a17da1edee1a6b665c765a632b582e5c15c1275576031eaed980951bba1fbebc9d5f0a21ac6578342037dff4f4c3e1eabab1b9d058d40e57756aad5a8","ssdeep":"1536:Xk5O7XwbLUNapDU/X/8CpIKKKbubmpja7y1GOT+WmiWwNW37:XA4UpA8kKK5THmio7","tlshash":"d373c8c8b6a674668267f5b5513f000fb23b58a9e84c4cacb288d8f16df4948417bf7d","size":78684,"data":"","first_seen":"2025-07-09T07:26:46.625002Z","last_seen":"2025-07-09T07:53:35.115629Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/jquery.easing.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"732646a9a4814be92b2b521b9479756d","sha1":"b0cd399cfbceb08dec60dfac6319ed0cc91a0ca3","sha256":"7504394b90a6b069d63a892ab0e3e006da99a5dddcceb957d3fde76a1033d950","sha512":"09ace7ff0dd1ffbd3bcb2d63e8ca282413fe681ef6c9058fd8ec1250231b38c574dffe0f5506fceb716d58d331d313b31502c0e86b9d5c965a4f0c8e7c3e985c","ssdeep":"96:lUejQjWb0OrPJrFJzhOroq3w3znhG9zp4tSZCHjuwE9nCDTVpWZ:ygwOrPJrLEsq3w3r49+uwLvo","tlshash":"5ac1ff8975f1761963b133f0117a201bf29dace5160e6808f8b4a9997c7b17c87bbc6c","size":5629,"data":"","first_seen":"2023-03-14T17:44:10Z","last_seen":"2026-02-20T20:00:22.607243Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/wowslider.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9645de12bf92dde68b0336b71ab8ccef","sha1":"2c76ffcdbdf9edf88025e7aa80ff6f639f95b93e","sha256":"456f37a7bb9a4837c6c62ebab7677430ce56efef3b5f59483490c6214a294ce7","sha512":"58b4dc92f430ed9b7002ef2f49e1f5c8a2fbf4e1c854dcb0ad0c50fa3e58c2010e7b03f7b04157d63b3e7e4fc1a76526f431994ba8c41418211307a8df973f62","ssdeep":"768:uLhf77H5hNoCc+KTRkklHO7VS1HREWtdkg:u57HTprKTRkklHO7VS1HRPn","tlshash":"56b21a957b60383981ebb271628f5bcff23580725e02c4a5a079e8582d7cc59127ffad","size":25355,"data":"","first_seen":"2023-03-07T01:17:34Z","last_seen":"2026-03-31T00:45:02.949138Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"939da6936296f949533fdbdf3319ee7e","sha1":"21f11da8bf2982c75f925da78c90985356ab554e","sha256":"b47dc04c04864132dca2fe7c6be7791db1e620579f9a4ec5a533298fec3f0a28","sha512":"dd402c7e70aa19389e863c8e682751eb92e454f0ae5d8d1bb07013e25d267e594e6ee9cd00b16c9e2b75c227c2c335f8458e3a098c3b0f3ee89b1826910d94ed","ssdeep":"","tlshash":"975130a1605ca01b4543d5d0f8a23eeef4de0058c77269d07e2c29efdadacb704a716e","size":3010,"data":"","first_seen":"2025-07-01T23:11:39.145575Z","last_seen":"2025-07-10T19:34:24.96622Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a0f32be04d0e8f24b57cb70d12fdf36f","sha1":"2b2a46fa8b8fe4f325a203feacf9b6a9a6fdada4","sha256":"624247221280bb2663f8ed636ec7007146cae9d72bb46c1c29a18517879fe92a","sha512":"fe5ca5164b9c36d71d327c9e1161d056fc373f746a92e3b07ab7e2386a710e5a4d058c3b527bd40e1df5c7998a218b0a708e8b5673a84a35ff52edd126d0937f","ssdeep":"24576:NKiBUTQy5eIlJtELigeILxwcxuCHveqqqnCeWwGyB0DF3FU7X2:NjB0lbELigeILxPxuA+qCeWwGyB0DF3B","tlshash":"35354ac5b1d1f8a507e355e9943b2005f23a2c1e7409f064fabcccc6aa6658e6277f78","size":1096996,"data":"","first_seen":"2025-07-08T14:01:05.54808Z","last_seen":"2025-07-10T14:45:31.608348Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/vendor/slick.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/vendor/slick.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 483\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-04-05T14:45:55.237154Z","times_seen":52396,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:09.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 09 Jul 2025 07:26:09 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6852b46d-16b0\"\r\nexpires: Tue, 22 Jul 2025 10:24:25 GMT\r\nlast-modified: Wed, 18 Jun 2025 12:43:25 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-06-22T10:24:25+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-05T14:40:19.215729Z","times_seen":12219,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/flaticon.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/flaticon.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Apr 2024 12:25:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 449\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1587,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ee7167338154bfc91a352a721a8b7b46","sha1":"93ba5bc55de1aecf08799309b2793ee740373e2b","sha256":"78f0804a87849e7f6c0f53baf14871530cebbf2374daadc8ff9c38cea96e5ffa","sha512":"d3970b90c4a52491b566fd3c57b83478e6578837e8ea6cb023fb22f8f835478eca9abeddbc663f286589b0c72273c1970f1ac31a7ebd9720d2e3bb4a93989116","ssdeep":"","tlshash":"8431f9b5c12e10409702ae4527af6250ef48b02d9cd4ec25e1a56d9dfff5d3883827ad","first_seen":"2025-07-09T07:26:46.520809Z","last_seen":"2025-08-08T07:31:51.775472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/asset/fonts/Flaticon.woff2","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/asset/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/assets/css/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Jul 2025 07:26:07 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4000\r\ndate: Wed, 09 Jul 2025 07:26:07 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 4000, version 1.0","md5":"1bf59576e8caf7be7b25595d139834d1","sha1":"c63f47c0a885ad0d9ae9a3c96f8a16290f55c7f9","sha256":"794927ce6554dc8f111903c4905b38b35550fb6398f39d708236e19e5fe4c9a2","sha512":"7fd0ab6d14936d55ef2b513b85a74490e58e209182c792029ea6d14dbbd6616f35fb658c97903b01a7ae95959ccdfa938f4bb708e3e0ba1a46fdb47e946b487f","ssdeep":"","tlshash":"ba814d7bbcc67397cde1c43ca46818f5364a1904798ea196d5fc508196a3f3d2653b84","first_seen":"2025-07-09T07:26:46.524336Z","last_seen":"2025-09-22T11:56:20.971852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:18.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://mail.forextraderinvestment.com/\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://mail.forextraderinvestment.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 09 Jul 2025 07:26:18 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":32,"dns":2,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=AGA/d=0/rs=AN8SPfrxFroEQ0mmbIPJ8GhnCu7pfJQCLw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=AGA/d=0/rs=AN8SPfrxFroEQ0mmbIPJ8GhnCu7pfJQCLw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Jul 2025 19:24:51 GMT\r\nexpires: Wed, 08 Jul 2026 19:24:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 43276\r\nlast-modified: Thu, 22 May 2025 01:09:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-05T14:45:13.129404Z","times_seen":36576,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":95,"dns":0,"connect":15,"send":0,"wait":17,"receive":4,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/app-left-img.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/app-left-img.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10931\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 106 x 194, 8-bit/color RGBA, non-interlaced","md5":"ff2812f70dd61631fc41e33524e8a775","sha1":"5c447e0805cdf9e9697faa8c927f976049de21e2","sha256":"d614bd84717ca4a8cc319f16742694e50cb75a79c4f4da7c0b50a2488ee15596","sha512":"74202f19df86fb22a3c67bbb61a1f6eb468a2edf3661b21fbce36ea2a45646cc5ab33c56d3badd7d938347778fcfd1b40e14be6d654cbfae993b6556543e6286","ssdeep":"192:rd1u0q/UTW7ujOjzvsS6mk0+XC5/DerfxRBaV9/x96c/wKbskRzhYYEjCcxCujqg:m0q/UFajf6BgekxHocskbYY4CNMqg","tlshash":"0c32c0eaa434f2a6f4b02cd74e75995f546489f440b7c107b67ea0a116f5d0cdc93137","first_seen":"2025-07-09T07:26:46.531937Z","last_seen":"2025-08-08T07:31:51.780721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/slick.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/vendor/slick.min.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10097\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42863,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-05T14:45:55.266867Z","times_seen":77561,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/login.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/login.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22051\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 645 x 586, 8-bit colormap, non-interlaced","md5":"92c2510a4dc3004231810240d2fe8dd7","sha1":"08d85ea923e4b76403eea4ef526a268faeaec05e","sha256":"d31880f0e4987445cd67f1fe6b1bae7b62a0774668d9d59a3d2fe1f85d18823e","sha512":"32f8c0316491ece09a29d7bd382ca21a90700db15559e27e7fa5659da159880faeeb07883b237c5ed53c6437445b235fe75efbc5a6510ea557b369eea3301ea1","ssdeep":"384:0VLDrcMPD/HkH70Vg5nmqJFAf8kM9LJBoiYP6JVidQ5ALaS7D730LDKCzriyFPgB:+PjHvg5PJFAWLJBokVidQ5ALaSXALDK7","tlshash":"e4a2e188232b55ef50306fd4feb85baf3d78a092584b65f1060014b6bfc369ade36156","first_seen":"2025-07-09T07:26:46.538726Z","last_seen":"2025-09-22T11:56:21.008197Z","times_seen":3,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/feature-circle.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/feature-circle.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 162634\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":162634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 461 x 464, 8-bit/color RGBA, non-interlaced","md5":"fcdb14f44fa57f676cbc7a06f4ac2517","sha1":"60dd1938ee974e2d36a6d586696d6f0cc9ff17b3","sha256":"38f3bcf192b962ce6e1b8aca2eb116679b3491f996f62abdecd3ef3c0d708865","sha512":"58267ded188df579b4a7c63d5cfdbc7a55893c6c931cadbd1db82443d261dfebd83b9486e554bcc31eba79244ab0cca8a588b976e7a8a6183dd801b43def462f","ssdeep":"3072:5ZMTcjTM1C19sy8AohVptJ6adm8RcPPUCL0QgAW0abCuEGSMPu9f5EL:QTqWy8AY76adPcUCLXgAWX+umB9mL","tlshash":"06f32375cdab651f842766dc114dc288bdcecbe320f755122627d1be354a22ea72470f","first_seen":"2025-07-09T07:26:46.541589Z","last_seen":"2025-08-08T07:31:51.734877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/app-img.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/app-img.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76595\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"f6235e4630772975726ccadfce756d9c","sha1":"e4112fc8c3cccf17039abbd4b82551e50e8c5562","sha256":"a0221cf51dfc9d883e0bf81c26ebde99047462957211d3f4338c6b9eebd5bb02","sha512":"0349639b93f8256976746bf97e279a081f0d04c2ed70fde0de683ee231b41e96ee6afbf0053d38780a30d32ce6a951da724404d7155987a9cb421e2b360bc77b","ssdeep":"1536:O3lg/zUq94G1AszgGea4I51Zx0ALdopqvtbFr+OKYEvC3D4GRg:O1ezXl1AdaD8ClFKOZ/4Ig","tlshash":"d073028e86b3e07c0320a19b11fbaf7e4cdea6e5a93956191cce549308fc951940dff2","first_seen":"2025-07-09T07:26:46.54447Z","last_seen":"2025-08-08T07:31:51.798369Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/js/jquery.bpopups2.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /js/jquery.bpopups2.min.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2028\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6229,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4482), with CRLF line terminators","md5":"c66bcbac07789e771117f9026eb95dcf","sha1":"57e13328d9e8454c4d4be4c1606a56142892687d","sha256":"515dca9eb34967b766e29c06565df12a77a14864e4300467dd718b4e2d4d3b46","sha512":"4cb2f73029e5d0e7e8591e0e2b23660b8db3385932774c5f99d9c915196fb79f7d6c5864921041a9a952f2e9a08be9d554c249fb32f36b98217518bd64e078cd","ssdeep":"96:zOymOUD/TaNtyPGMEXidmdVUimKlKmwgqoxzy3R9:zOPO6WyPuideFkDSxzo","tlshash":"54d19469756a7005a47b727e56af450f83205267bf234d20749dc8ec5fb2b8532a2f4c","first_seen":"2023-03-07T14:58:38Z","last_seen":"2026-03-18T17:03:09.863773Z","times_seen":34,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/main.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1510\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5883,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3e71a7d607fe308a96a6ff97960861cb","sha1":"7711c4db34de8b7b1548abecf645d4ff51e430e7","sha256":"8a58750e8d99eae713706c45a1b140a69392c8909c1531bebea80b1d8c35bdd7","sha512":"ff95cbe90d5c1f2b82526094a0e153df07c9560f4cbead3f51e8cf11ce70e2d8b38f01a3bed65fe6c63356c5c29d13afed66ebabff57ff36a55429140db39b86","ssdeep":"96:UFwaBBLBRUVjCqvvBuVpC4KWBbEFsHEp5q5bk5Fgooz:UF5WVhuVQBWu6Tz","tlshash":"06c1cb1ab01129a564bf7336da3ba504ef7e0227c3054f20bafd18991f7019476a3ede","first_seen":"2025-07-09T07:26:46.547286Z","last_seen":"2025-09-22T11:56:20.964323Z","times_seen":3,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250707","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:08.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:01:48 GMT","end":"Tue, 09 Sep 2025 20:01:47 GMT"},"fingerprint":{"sha1":"0E:29:D7:DB:FC:32:8C:DD:65:47:B5:CC:0F:62:04:EE:7C:AE:80:42","sha256":"69:D4:7F:65:C8:4E:D9:C2:A7:07:4D:7E:49:77:C4:42:53:99:A4:52:83:7A:F0:39:F6:B7:63:7E:C9:35:F9:51"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250707 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 09 Jul 2025 07:26:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy: script-src 'nonce-xFgxap51iUqrSEu2e2lqtA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw1pBiEOLhmLB5x2E2gQ8da7uZlJSS8gvjS4oS84pzEktSi1OLylKL4o0MjEwNzA3M9QzM4wsMABJiEm4\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=28.SE=cMwTGLaScL2bW2CCM3Fuc8YPt268KsOGf91aL1b4SGkjWEQ041y7RrAL8IR8mdHeawNkPTIIh35RbNjzpUOqQXLKnOmZDzmXYIsO0OLtJkE7MUfVzyHWzk2JM3Whjyq_Ih74rXlZRAEKzVpq5IKv-Zbb03cwDNXwDKXr6tYOyuEYpSB-6A2Kps4Le0q07BKLz7dWXrltFFKudhDwzf4QDSVOTuumauzYoGAqBG6YSfIDz_cw; expires=Sat, 08-Aug-2026 23:44:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/vendor/animate.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/vendor/animate.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4439\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8dbc6dc67b4724087e6d907ff95ac6db","sha1":"9e12535c54fa1391d46795fc52d7071251974101","sha256":"a6bd510fcb0a3e7e274824c8272223a2d9d664ce6634559f18200f9fc0bb4371","sha512":"1c6b28f94155ce6a027e8bd3aeadadca21efae7550503b3d5d41835f1548addfc0877f162ad506efd925048f39214172284b4d8dfb525770a38b5df92c348ecf","ssdeep":"384:BHNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLceo:JNuKuWg9unuLuJu9KIZQMcLceo","tlshash":"ed732fad2991108456638a1d83df5e68273ce573181aadef73c2488fcf8bf6857c9147","first_seen":"2023-04-08T15:08:23Z","last_seen":"2026-04-05T14:33:25.14644Z","times_seen":2535,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/jquery.easing.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/vendor/jquery.easing.min.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1822\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5629,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3601), with CRLF line terminators","md5":"732646a9a4814be92b2b521b9479756d","sha1":"b0cd399cfbceb08dec60dfac6319ed0cc91a0ca3","sha256":"7504394b90a6b069d63a892ab0e3e006da99a5dddcceb957d3fde76a1033d950","sha512":"09ace7ff0dd1ffbd3bcb2d63e8ca282413fe681ef6c9058fd8ec1250231b38c574dffe0f5506fceb716d58d331d313b31502c0e86b9d5c965a4f0c8e7c3e985c","ssdeep":"96:lUejQjWb0OrPJrFJzhOroq3w3znhG9zp4tSZCHjuwE9nCDTVpWZ:ygwOrPJrLEsq3w3r49+uwLvo","tlshash":"5ac1ff8975f1761963b133f0117a201bf29dace5160e6808f8b4a9997c7b17c87bbc6c","first_seen":"2023-03-14T17:44:10Z","last_seen":"2026-02-20T20:00:22.607243Z","times_seen":12,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/spop.min.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/spop.min.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1113\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5029,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4895)","md5":"343280ffca7eaf204f0903dfd1155bdf","sha1":"9d08c2c51f1a25479442621b70bebe176c3e1f76","sha256":"c9ee7fe55893a37469c10e787d8e2b4ffc0aab3875a69ed2fd093b96f6d4bc7c","sha512":"62724d47bba171a62fe63e70c8f01e621fe669c3c6b6a0e05677ecaf5a495c79862a3ad25031028cf5e85f7924ede1e802d92b98de8365c867172cdccb221641","ssdeep":"96:ASvF/0V9kKpEH+Lpuh57JsYiqmA8ujUcsyuv6brWr6rqrmTVgbfoiL:AGoEJlqCrWr6rqrmTVmfoiL","tlshash":"43a1debb4e43288c72729b96d7cd5e68a2ecd34371538ddf33092b5e8706e9925c5207","first_seen":"2023-04-08T10:40:16Z","last_seen":"2026-03-23T14:29:18.694261Z","times_seen":27,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/main.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Apr 2024 12:25:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13612\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":129396,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e7facc4d6e1726df8f42665c0c457a5e","sha1":"269ee524e61d6238cc60a1070f795a95736b2c28","sha256":"5e4ad8c18c3670ab94873da15748d4e388946a26e745fe7e8bebf5b65106dfeb","sha512":"97e400557dc578d356c788b712648d6687ad7f2a23a175b7f793466661f4720f3026d359e50008044a3ddc38f7638fd875f8e0c805cb3193f883aa7bb17a1754","ssdeep":"1536:LLQyCktpS7/eEDjIkbRWqKBemBtd+wHV6veKT74Ry:EDR","tlshash":"44c38469e80211466233eb3477f64654fa7551239f0216e8badcb1498ff4afc01a2fde","first_seen":"2025-07-09T07:26:46.552604Z","last_seen":"2025-08-08T07:31:51.730461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/menu-spy.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/vendor/menu-spy.min.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1188\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3205,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3091), with CRLF line terminators","md5":"da4eb2281844112d81280b17d2014364","sha1":"10782d346c534fca69a410cd0194a892aa64dd2f","sha256":"b003be7b0627b15271829a1ce53bfb51512a5e20bf42fb9844cbbcfe48b8a60a","sha512":"d568e428b2c8ab41606d1410d9a198ef5910d3565929e7c18c6f834c778742d55014b0688765d41d8f8fb6cae0532f74508a277e2698f9a5909f04a47e30910c","ssdeep":"","tlshash":"216133ce7200397942d7e2e5426f174eb23b745f744a109cb1649ce65a3405f92b3bbc","first_seen":"2025-07-09T07:26:46.554086Z","last_seen":"2026-04-02T11:14:10.509517Z","times_seen":4,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Condensed\u0026amp;subset=latin,cyrillic,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"GET /css?family=Roboto+Condensed\u0026amp;subset=latin,cyrillic,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Jul 2025 07:26:07 GMT\r\ndate: Wed, 09 Jul 2025 07:26:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2569,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1641f5bfe2118b27f48792ff1cdc339c","sha1":"8b9a2e801a18aa717e326f016efb13573c17e124","sha256":"ccb4691cd77bd25d343e98beb5a981adbc8c8f8e2936249371a4a79780538002","sha512":"687c3a9ac466b0162e7dd59a1cf6e168ddf63de317997290adf135d93108cc6c1b003a3fd58e465abb6a500cecb5b1e7bc00d3af90032c9daa0827a4fab8de55","ssdeep":"","tlshash":"c3519991082ba404e7d31cca2acf7e2adc4e12046449d5a5dbfd1c69acf6e76236834f","first_seen":"2025-05-30T21:55:41.913966Z","last_seen":"2025-09-11T07:59:14.657026Z","times_seen":262,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/images/cnd_pix/331172588.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /images/cnd_pix/331172588.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 115773\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115773,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 394x420, components 3","md5":"112b6966b7176df2a0156dee73ef656b","sha1":"867c264a1632ca3678a5ce1fcf6fd389e00f7f2f","sha256":"51274efedd7630658499918f8d78db4bc7a5d85dd6e95275b27c43216074cb6c","sha512":"dac45ce63d9948849b825703b3fa3135038eef4180f87a032bd347bf5850597fa18f89ab12c93fee6fb74eae13f0f13cc22c7098c8babba3b59eace9f4cbfadb","ssdeep":"3072:HYdcHNvbpAOpuMygM2JOfFThiuRoou45WFg9ht3tAeL:4yhpAuLy72YzieWkDAY","tlshash":"6eb31209efba1dd4f7b20c63749948d88e24933406935acd30bdac69d729d07e8ac795","first_seen":"2025-07-09T07:26:46.555854Z","last_seen":"2025-08-08T07:31:51.745941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/bootstrap/css/bootstrap.min.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Apr 2024 05:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 448\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1074,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, ASCII text","md5":"76d912b5e5a7d8ca4157b1ac0a639ca7","sha1":"23f723a9f629aa40a82383187934ebab1a3966f3","sha256":"a27ffc59ff18278bd77f576366780e154ce921d2ae16a6c448bd9e2f808c3409","sha512":"a7afe68457c49ed470ca621d5269a7c5aa36156c8ecd3d0da0384a824d863bafa46196697a85b657819f8d944c110885515d689d8ba22cbf1e3a5149a9e7a4eb","ssdeep":"","tlshash":"4211630bd24268afc0121041fa418b6051448222b09f0fb12b9ff69ef9cd16e89362fc","first_seen":"2025-07-09T07:26:46.557278Z","last_seen":"2025-08-08T07:31:51.759042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:08.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Jul 2025 18:55:08 GMT\r\nexpires: Wed, 08 Jul 2026 18:55:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 45060\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-04-05T14:45:13.120972Z","times_seen":57906,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v30/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBO5Xw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:12.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/robotocondensed/v30/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBO5Xw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 17:15:32 GMT\r\nexpires: Fri, 03 Jul 2026 17:15:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 483040\r\nlast-modified: Wed, 28 May 2025 16:58:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20820, version 1.0","md5":"1c36c62fd135c15a91ab0a4695409942","sha1":"fa9aa47b97d7ff65331266954194444fd76dd81a","sha256":"543c03fff71d1b39590af102e0852c2dbce46f4dbe4faaebafbef6edc82e78f5","sha512":"7ec543d40b71834ed3978fcff0b36e766d7533b5e4f9feedad8a846920b1c81be6e37037d393066c701472cb719de810061168faf6b2b5ba6df28621c456a6b9","ssdeep":"384:gFvHBr3tu3hnGbhqf1GacPOwMRN/bcH6LMI4nOF9ZgzuWe2uA0bC+Rm6nViIxh:4l3tuxmAgfP7MDbC6LMI4nOFzsW2ulCq","tlshash":"0b92e1e8c5266d8bc49595351c629a2388ca642ef46d3ccca92ced25bca162e4e370c2","first_seen":"2025-05-30T09:26:46.375942Z","last_seen":"2026-04-05T12:50:27.061928Z","times_seen":2489,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/bootstrap.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/vendor/bootstrap.min.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13903\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55779,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (55498)","md5":"9a2d5ae81820dc9895484dc214ada159","sha1":"5f63a0ba279d8e0077c64c15c80f0a21cf8ab616","sha256":"f761d9b468bde1b761d51ba2b6848345a0d5497348098f3e395e663cfc993157","sha512":"29b62c3cfa25965ed17a33d335b7215541f42e953c11927493dba8dc4c6a556e2d80ea00a3ca4651314f688983cf9515dd9f2d8c86eccd19f630a07006007fb9","ssdeep":"768:t1Ye0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:t1c+U2QK+GM4ZIwwoqq","tlshash":"3443b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","first_seen":"2023-03-10T14:53:48Z","last_seen":"2026-04-04T15:17:54.625089Z","times_seen":73,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/fontawesome.min.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/fontawesome.min.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Apr 2024 12:25:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6674\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31070,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30903), with CRLF line terminators","md5":"124e339daadf64a81ca93295514e3bfa","sha1":"e3c3b1f0f207e82d2070353fcd3ae80f4d3fd40b","sha256":"8f2c7cf9915e5361da23d3ea4b748ee0f5f7486430c59cebbea3c4b5be64078e","sha512":"1c5f1c09c31dd2072b5f24561159361968660adada21fc68367ce0e4ab88369e67240940f2c531074d4e6118b535fa2869b524f7649a87025ad3814d0be26f88","ssdeep":"384:vHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8Z:vwlr+Klk3Yi+fwYUf2l8yQ/e9vC","tlshash":"5dd241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2025-07-09T07:26:46.561714Z","last_seen":"2025-08-08T07:31:51.779205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/signup.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/signup.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19477\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19477,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 579 x 668, 8-bit colormap, non-interlaced","md5":"7715b6b17c4543ccbb61f9c9a05a93b5","sha1":"f0846d83f60b86f5eb138a19504973c984685d92","sha256":"273cb9beb45da3d368d7d6b1a488ecc4a598e9d874ca6e07b10cba0de65b6f32","sha512":"8a618fbac4f09250e1ca12c8299687173fd6232b272c8b7e281f1cafc9d039cc1b373a3337a3767cda2f5e1fb4ae6e996c42370ef2e788761522f06557dd8ddc","ssdeep":"384:LbLME5K3d08yheuer5YNAboBCTtgOtMfVzAAxo/EewqoZ2Q:3LQdXygPr5LoC5G98Ax2SqXQ","tlshash":"7592d0174afafd9eb4115d4ba925f03b70400bd151797a70e9d0690db3bb79c80e174b","first_seen":"2025-07-09T07:26:46.562933Z","last_seen":"2025-09-22T11:56:21.010682Z","times_seen":3,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/animate.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/animate.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4839\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"4b2af0a41eef75639dde95c23efd47db","sha1":"26f4b70e8c3892c842d5000d59ab120a8c5fad1c","sha256":"70c941a384137809113d33db0b4d68e31a85f711cdbfb5a2952564ac08fdc6e5","sha512":"c0d9a2d9fd58309b4b4be30ffc8b98a547cd936237bd6c0421ef18b7f77bf040ebf10ce7a8203944979bf0cb9fc73c461cc6074ecdad9ef475a7e9858f7ceede","ssdeep":"192:xIQHnfwf2T/awfDZUiduG+MONjPscYODkcWFFLbimZbHMxymDSVbyPiVEzfukrW5:xIWdWy5","tlshash":"b063096929a1114466370a15c7df9f78263ce1a31866ecfeb3d2588b8f11fac23cd617","first_seen":"2023-04-07T05:48:21Z","last_seen":"2026-04-05T14:42:41.505864Z","times_seen":1167,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/hero-image.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/hero-image.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104483\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 604 x 438, 8-bit/color RGBA, non-interlaced","md5":"39da8ed3670acc83b5c23e0c42ad65ed","sha1":"23c976ef66b1c802130ae54005c350570a8fcab2","sha256":"46bdf78f5d44792b72f1fc5d21ebdc3beaac55a1355c58795a8fe6c99097c091","sha512":"8ac2338d8403e772ac4cddae8da52483ee304204e4e5db0c74181b13445a431261088efe5bba09ad3e3cd2f1d97bf5ac0d5f095faf9459c1093428a6d392ae44","ssdeep":"3072:E2rQ3IVEOP+OHfNCe0DR5WkZ2zNIbpK22:pk3KX2O/B0DRo+2NIz2","tlshash":"79a312dc9fd4188c40acefa9194f9a41790fd54c8d933b38249134cdf27a6d1ac99bae","first_seen":"2025-07-09T07:26:46.565082Z","last_seen":"2025-08-08T07:31:51.786533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/asset/fonts/fontawesome-webfont3e6e3e6e.woff2?v=4.7.0","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/asset/fonts/fontawesome-webfont3e6e3e6e.woff2?v=4.7.0 HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/assets/css/fontawesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Jul 2025 07:26:07 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Wed, 09 Jul 2025 07:26:07 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-05T14:48:00.041961Z","times_seen":413303,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/14d3ba1/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:09.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/14d3ba1/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 09 Jul 2025 07:26:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 18135\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"686cd6a3-46d7\"\r\nexpires: Fri, 18 Jul 2025 13:05:13 GMT\r\nlast-modified: Tue, 08 Jul 2025 08:28:19 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-08T13:05:13+00:00\r\nx-node: m9-up-gc69\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111737,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bc503b02cdb6ae6ca1b4a2f8e30225b5","sha1":"df1156f682fd19d91a7b70597fda4033098c5f95","sha256":"d046db7b290ef1462b8457d0a2a6cff8d1ec4acc3231665d260b9fb676d77fc9","sha512":"1a32fdf5609b104135aff806f6a69b0515db25f1f3b15eec4fd5ab873e606c3e8a65e56c7318b16435471fc3055b142de60a45c173e228ab370641a4ab668c31","ssdeep":"1536:+L5FTK2yX6X6grhNDupyd2Z2QSSpHyZ686O+tlp4lUJ68F6PQRi4OXOCDI6Scnoh:lR18PPvOL5eS","tlshash":"4ab3d86aead2953ce51e941ac9c5aa3ca63dd143cf230daff740f3e147c66e20276509","first_seen":"2025-07-08T14:01:05.53867Z","last_seen":"2025-07-10T14:45:31.577507Z","times_seen":33,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":78,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/random.php?data=8","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:12.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /random.php?data=8 HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:12 GMT\r\ncontent-length: 680\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Jul 2025 07:26:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1788,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d4014c3926c0119f46b72556b6ea1c86","sha1":"65bf6877110e8268ff5e5424a5a2067b5736458a","sha256":"3794e7efd0b5dd40d1588a74c7b2af9658744a83a92e8e451fdc98d726b20722","sha512":"96b7fdfc53b5bdb8c19b312a9dd7c3f1c0a1d559544bff17cd3315956caf86ecc89b62e15a811b8d216c3d2f1e75eb55006e5b8991c507c8b8d055a9348bad2d","ssdeep":"","tlshash":"663115b7c1c8f505613281a9e3216f68edcf043787071ab0b59f7ccbaf748a645135a9","first_seen":"2025-07-09T07:26:46.567691Z","last_seen":"2025-07-09T07:26:46.567691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/data1/images/2ban.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /data1/images/2ban.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 08 May 2021 23:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 111501\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111501,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2021:05:09 07:33:23], baseline, precision 8, 1366x640, components 3","md5":"740cdac1156e80dfbe4b1a15dc51dda1","sha1":"93fce80c6fbc02cec483f0b7b365ec5fffe6530a","sha256":"2d571d2a8c9ec956f0d7986591672f6a30db50f4cd263e47a529f0f24a1f0f6f","sha512":"37744b47243fb4ba34420236cd3dde7bda8f6141f9c4c9603daa377d34c74f3239cf21ede9a071c444a223d604b30969d0d8e6269f1458be77569e9459b66615","ssdeep":"1536:NZFbZsjonTBz4crgaHNuKtF+zGe+q1K2s87e3Bpme/5N91Hd7QUAt:9bIo2VatuLp57eRplxr1qht","tlshash":"36b3bd315b3d4a81eaca69271341de70db305fd05b4336fafebc3a1d2b1ad94082556b","first_seen":"2025-07-09T07:26:46.568806Z","last_seen":"2025-08-08T07:31:51.767894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/data1/images/4ban.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /data1/images/4ban.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 09 May 2021 00:36:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 137283\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2021:05:09 08:36:13], baseline, precision 8, 1366x640, components 3","md5":"7ec5c061dbc2a4e384c8a8c05604c6ee","sha1":"e864c1cbab5cdbaf3b8fa629ce49396f06dabd99","sha256":"6f156e044619451594ce4f558b8e8bed44b25a043d71c22f114b798ac58ca15f","sha512":"c6533d583c3f9282b2cd548087ef80987ce8a9ec6e7c08f04d8d3639c6c7739c084be8b9f37a5c10e18e62fedbf3c4307ba49cc3ff3df5a6e76741c582d55c5c","ssdeep":"3072:WrKarKV8ueel3qhKOPct/o0MYB3TwzYRya:WGaGVeoOP4Q0X1TTL","tlshash":"fad3ae788a5e0bd6cac678331b58de7683764fd0134363d2ff2c76496738c4158a4aab","first_seen":"2025-07-09T07:26:46.569945Z","last_seen":"2025-08-08T07:31:51.742021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/jquery.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /engine1/jquery.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 05 Jul 2020 15:42:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32364\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95931,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32047)","md5":"5790ead7ad3ba27397aedfa3d263b867","sha1":"8130544c215fe5d1ec081d83461bf4a711e74882","sha256":"2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0","sha512":"781acedc99de4ce8d53d9b43a158c645eab1b23dfdfd6b57b3c442b11acc4a344e0d5b0067d4b78bb173abbded75fb91c410f2b5a58f71d438aa6266d048d98a","ssdeep":"1536:5P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLNFoqqhJ7SerN5sVI6xcBgPv7E+nzms9d:A4Ud4qhJvNPqcB47MfWWca98HrB","tlshash":"7793d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-04-05T12:47:22.047883Z","times_seen":16256,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/contact.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/contact.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 503\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2567,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"657298a9499af9178811ce14621a5252","sha1":"9afb28a34ecffc3a50d239d27a6af0efd3655a6b","sha256":"91b9c7280f9dd56adbe83a75bb5c07ade2a149b0184ca577be32523ed97c4bfa","sha512":"c5bc39bc3efbfdc334517da16019a08a714d69b2d09dca66c7cf5688e84826490172f5d6d8f763ace1b171a56fbf1c71ff17badd5afe82c05519800222dc4f73","ssdeep":"","tlshash":"5f512805ac981fd98637a77ab2f29721ef1e511fc6050e52f86c189c1fb0d887912f4d","first_seen":"2023-03-12T17:25:02Z","last_seen":"2026-03-28T05:10:54.823201Z","times_seen":23,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:09.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 09 Jul 2025 07:26:09 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68419fc0-1396\"\r\nexpires: Sun, 13 Jul 2025 08:21:01 GMT\r\nlast-modified: Thu, 05 Jun 2025 13:46:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-06-13T08:21:01+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-05T14:40:19.206718Z","times_seen":12217,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/images/s_attention.html","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /images/s_attention.html HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 13 Apr 2024 05:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 434\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1042,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"724b43d0f4ea9aeae90faa0f32719824","sha1":"4368db36ee3553d45f2c6b7f81d03216f47a78e4","sha256":"aed932db29346d252f7c73a39c51cf482c2210975a3ab268dde06cb11647807f","sha512":"82069b78ac8fbfd6f3fb92d2930067473f0ecf0cd873c757157605bc919da07f1f1066d67d7623f6eff1f281dac3ac6ae2572a8ad628308621dd45d6234ceb35","ssdeep":"","tlshash":"2f11425bd186b55fc0270091fa404b2061198262719f0fe07b8ff18af5ce29a8a3b3e8","first_seen":"2025-07-09T07:26:46.573499Z","last_seen":"2025-08-08T07:31:51.75024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/pause.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /engine1/pause.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/engine1/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 15:42:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3986\r\ndate: Wed, 09 Jul 2025 07:26:07 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3986,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 102, 8-bit/color RGBA, non-interlaced","md5":"7cda1a58e669562a7d269929ab436f8f","sha1":"62784475d66c2dca1832e1470fd6fb0f2ec3edf6","sha256":"3103ad6201929970fa5eca1610d27164197e5a6d8f52a15536858d8e94898a92","sha512":"f1dcf39b33340f5e09d20b6c390a0f464c182c9a895d500b8e53e094f3632e8799b2c65f78b42bcfdbf19a4086c3d120585fdd17098eb3dc964ad2123e26b9cf","ssdeep":"","tlshash":"0d815c5e4a4451dfb4883aa14dcf2252ba7e3278d95779a885d1e1ef20c2e06eb61c70","first_seen":"2025-07-09T07:26:46.574557Z","last_seen":"2025-08-08T07:31:51.760081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:08.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=AGA/d=0/rs=AN8SPfrxFroEQ0mmbIPJ8GhnCu7pfJQCLw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Jul 2025 21:30:22 GMT\r\nexpires: Thu, 02 Jul 2026 21:30:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 554146\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-04-05T14:45:13.171021Z","times_seen":53762,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/m6KjK04WZh","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/m6KjK04WZh HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 09 Jul 2025 07:26:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6115\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"68653a01-17e3\"\r\nexpires: Sun, 06 Jul 2025 18:42:40 GMT\r\nlast-modified: Wed, 02 Jul 2025 13:54:09 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: STALE\r\nx-cached-since: 2025-07-06T16:42:40+00:00\r\nx-node: m9-up-gc231\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17761,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17761), with no line terminators","md5":"fcbaa046c3c413a9222dc4182c2204bf","sha1":"dde480a9765518036b96d4d6c7a01517eaeb8e12","sha256":"306ed5c6c3af6ab962934b9acebcf18d7e0ad29a5821bc079eeb97c280658bc2","sha512":"ff96f47f29c56522c707c086853c51dab56d8697e6a4704dacb0cb7d2dd907f5dce007e10fb6bd9ab6fc2b094e6118fe40096707ab84725532384d612f044714","ssdeep":"384:boUJJ1QY4mmPY0prAN3JyMiqwIlEeJMz8P08wIbqWcPWv6:f3ypAb/9DPpWWcPA6","tlshash":"cb822a6e7959b93743b208b9606f6209723545ebd404c920a401e98c7db8edf827fef8","first_seen":"2025-06-30T12:26:00.73539Z","last_seen":"2025-09-07T19:58:35.343262Z","times_seen":207,"resource_available":true,"data":null}},"time_used":2647,"timings":{"blocked":1211,"dns":142,"connect":64,"send":0,"wait":74,"receive":21,"ssl":1132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/images/cnd_pix/1024887934.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /images/cnd_pix/1024887934.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88781\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88781,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 394x420, components 3","md5":"f151ce2a7805b859febc789b60ec9fed","sha1":"b88cc8db5d2ea2a6a2d4f2a58aea824343b5766f","sha256":"b7e6e454cc83d6ef8ab7686c32f0f648b74f1312dc0a7068da543b83312a976f","sha512":"1eb598cfa250d4905fa065a726a43917617fbd0e3879e2dadc3b21aab53b4df601ae84ffc6423dd585d215d3279b14441dec9a3dbc30885387856fe481fd581b","ssdeep":"1536:HCv8+psLF2KBbZ7jhNybuEtCfKtfdQ84Veg48jTD6JuJGoTRV7HEx/2V:HasxdBb9hNkuq+KfdCN4caJuxrEJ2V","tlshash":"0183025e0143a1e8c0eb5e8539b2f4580994dd88ce8bc985712dbeb05f9113da739f3b","first_seen":"2025-07-09T07:26:46.577083Z","last_seen":"2025-08-08T07:31:51.782104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:09.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 09 Jul 2025 07:26:09 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68419fc0-eb0\"\r\nexpires: Tue, 15 Jul 2025 09:20:27 GMT\r\nlast-modified: Thu, 05 Jun 2025 13:46:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-06-15T09:20:27+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-05T14:40:19.246824Z","times_seen":12218,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/statistics.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/statistics.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12415\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 473 x 659, 8-bit colormap, non-interlaced","md5":"8cfb76b76bb298964af9b07076accac6","sha1":"83a8c89cc62184048dd8256e349043b06202ec5a","sha256":"acdb2614bff9807db861b48158912e95caa0eeb205d0fca9e0d61f6f9d17ae33","sha512":"9d4f2160a331047ba94de55b3f13695865b88bb7369a330a3fb55b33b7122720d2f6341d50071067f58f5a36f860c1008179cbbd287ce288a44b5747ad5cb165","ssdeep":"384:HRuAtUgpwR06S5ZCK47i/BeE3lgkZvhlCXiRHinZe:H8AtUgmR06S5hDedwZlUiRCnZe","tlshash":"7142c09c0774de4b2d36141268c0f3874272b98ba4cea50ae16f19def1594ed02fe0ca","first_seen":"2025-07-09T07:26:46.578976Z","last_seen":"2025-08-08T07:31:51.763067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.244Mib_Mqu4.O/am=AAAC/d=1/exm=el_conf/ed=1/rs=AN8SPfp2YCs3RIwUVesTMcvDryzdZjmeKQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.244Mib_Mqu4.O/am=AAAC/d=1/exm=el_conf/ed=1/rs=AN8SPfp2YCs3RIwUVesTMcvDryzdZjmeKQ/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 76379\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Jul 2025 17:14:28 GMT\r\nexpires: Tue, 07 Jul 2026 17:14:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 01 Jul 2025 21:14:24 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 137500\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":221222,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2544)","md5":"924548d1f97f5d62705738131ad69b8c","sha1":"a5346f6c4b2520381e47aa084220f5a4b0da87ce","sha256":"1afb404248c137c2190c4612a050850771600d66bc8770dd9a38fd8c9d368e9b","sha512":"529d8055b5cde02a76d85fc84d9b0484d280eed595615307c72157587228bc647ae8395b1c7c88e9ed7eeb7a1ebb9309b1a96a15317ed5a3f73726c60fa35825","ssdeep":"3072:5rMDn3JrObS4XsGq12nDWCIVrurFJzMT/buZxbF99km9/oa7:anuRJQA","tlshash":"7f24e7d9b25270679363f4a6517f000eb13b586af8484d6cb28de8e2aef49190177f7c","first_seen":"2025-07-01T20:52:11.899642Z","last_seen":"2026-03-10T04:57:46.997573Z","times_seen":968,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":66,"dns":30,"connect":21,"send":0,"wait":23,"receive":43,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/telegram.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /telegram.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Jun 2024 01:57:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1173\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"124b23065d10977c111b9159f00b34a8","sha1":"f9c2c42223cb222e122d8916989e535c16e5dcd8","sha256":"bdd583ea6a23c1533527326f32ec1c13c12adf850eff7739d3afe7115c2b980c","sha512":"fca73ac22f7bd8e92c9fc7ed77e60483d40aa8842d53d7b538aa7b469a9569658ecc4b5e9fe34280527b5fab5f1023565f0d7e529add6d5eda6f1acad0368af2","ssdeep":"","tlshash":"ae210dafcec0d2bda06439151b131393c06f79a83b254cd8085f93f006cb27a2143071","first_seen":"2023-06-28T05:56:01Z","last_seen":"2026-04-04T21:51:51.321376Z","times_seen":61,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/feature.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/feature.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 712437\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":712437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1629 x 2215, 8-bit/color RGBA, interlaced","md5":"f98fa7cf2596400573de78a113a30d0b","sha1":"c81e83383b361f58ddcfdabfaa80574a31a826b1","sha256":"7dd99ce5c12ca55381b0959fed407c630825871cfbedb3183a4f51b05d764dcc","sha512":"dbcc5e5599818d2bd7e9e21a72ef5901df1325d383a2e26d24670480ae59c59ee4515a73f55ce795a4bc5d37e849ee4a37a39a9c059521692df0e4147219039d","ssdeep":"12288:GdzJspeMyECcMjfN+RYsdGgUeY+liqmWcrCNVVqnWvHqGp5iRDxa19sv2FtqXIpf:GdzJCexE4jkRDjRPZmBCH6AHqGuJxPvu","tlshash":"60e42300acfbd56fb9f764f4890d5b30132e637baaecc6e91546e9141c14ce6771a2c2","first_seen":"2025-07-09T07:26:46.581015Z","last_seen":"2025-09-20T00:26:05.07963Z","times_seen":8,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/footer-right-man.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/footer-right-man.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9918\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 272 x 320, 8-bit colormap, non-interlaced","md5":"fc8b39154360725d645ebdc0e4fb6231","sha1":"684370e360b256dd7d72b0b32a5544738a3aaadf","sha256":"54c5753495e891b87dde05b1b17357018052cad94c170518602511afe9e164eb","sha512":"c5f1ed637cf23af4bc353bfd5b641d9eb8f7a621c4ead5df361bd706637ca7b2960256c70e98d973ccab942778a24ecebe00a0fa2622652cec8e6468fbc3c026","ssdeep":"192:Vxv4efrEwQPyvZHeCc/0/+5OIQodogCnxzjs/UqqFDIDMPPwuzurY3ekaD8aYHvT:Vxv4efA7Kh6cOtofBs/UqqWDwPwdY683","tlshash":"4b22c088fd988843f436f271db705f6a83358f5c5e4ee0e9184c9e740cf5e25a996c49","first_seen":"2025-07-09T07:26:46.581788Z","last_seen":"2025-08-08T07:31:51.796818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/wow.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/vendor/wow.min.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2634\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8155,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8099)","md5":"21fe90eedcbaafb4ed529d78418d30bd","sha1":"a16375b80220d315151f57bab2d4ee03c9fe1d20","sha256":"7852a22b72ead62cfc4a1b1ca32874b3e222f232a991a6d1432313572f534135","sha512":"30be63048c2b41ea7953dbc137b4c9047704196430cdf1995334092a41fe8c6336f1f109c195c5b47c857ee92838e4ff8d255d7ca8b8280793bc012d35b7fcdf","ssdeep":"192:tmEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:EEE/Amu6qUxVBxGkAI///IR","tlshash":"99f1baa5374a70718e9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","first_seen":"2023-03-07T01:37:53Z","last_seen":"2026-04-05T13:17:10.877748Z","times_seen":4716,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/m6KjK04WZh","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:08.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/m6KjK04WZh HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 09 Jul 2025 07:26:08 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 673\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Wed, 09 Jul 2025 09:26:08 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc54\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1329,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"21f70589e63859949697fdaba76ce402","sha1":"aaa44bf8f144766bc58e03cc46d446cd6e1f7e04","sha256":"94f9c5973783e5f4807ff071c36786f98213bcc88c016fa232707c419b5ce925","sha512":"817be55ba9789e97ea5dd3af76c07262083fb7cf7c93ebd50213181472c72f9ca9913bfea4c060da3e4b734aa57dc3fdd14dfc71ade2c5dc1abaf9821825389d","ssdeep":"","tlshash":"0c2115b20d4c54330981bec7522bbe03253c8666fe814f74db946c3c20573d9131b24a","first_seen":"2025-07-09T07:26:46.58404Z","last_seen":"2025-07-09T07:26:46.58404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":180,"dns":60,"connect":55,"send":0,"wait":236,"receive":1,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/vendor/bootstrap.min.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/vendor/bootstrap.min.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20694\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-04-05T11:19:13.696337Z","times_seen":3557,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/coin-5.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/coin-5.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3576\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 60, 8-bit/color RGBA, non-interlaced","md5":"0a0c046c64dc96b29b77ff57442c2840","sha1":"32096491e78d30cbb9ccdc34efb802aabbc79c2b","sha256":"11a07fcf4630a29a176c7e83eed56a58040f092f9d2980d5609ebfc6c80a3a56","sha512":"d71351c9c9b414e56f07d8791f16cc13560bbe9d7d3db2989ba3a18c515e91f39ca9921a457c5b38964930e42ad23eddc609d5ef9162a817e250384bfd54a301","ssdeep":"","tlshash":"b6717dadc4800784c280808bc8e65819cdf7f9ac8c0a47e5b6552f6f8266d44f498375","first_seen":"2025-07-09T07:26:46.585745Z","last_seen":"2025-08-08T07:31:51.740264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/map.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/map.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108366\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":108366,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1149 x 698, 8-bit/color RGBA, non-interlaced","md5":"c0f020218178f2208cf6dc1babbc22a0","sha1":"041d1a7f802878a632c9d7663b5be9ec179a8e62","sha256":"c5653b277a635726d92b420555c2c6675113d6c976efe1046e730231bf11756e","sha512":"851d2fc903c74693071a7aaa2aa235b638ccbc66ca4a7f5ecd2eff0d3d6e3fc345ad43f023da2ff05e2daec3aa662c781a66aedeabda44e522435813e973a946","ssdeep":"3072:hACxAScRXFavmHkFg3Q1xpAjC71cdqMUz:hACUFHsIUQEcdqMUz","tlshash":"e7b312bce64be07289472e316afdb098c1c1b4e0a2f585d91370ce84bd64f9927a2d5c","first_seen":"2025-07-09T07:26:46.5868Z","last_seen":"2025-08-08T07:31:51.770205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v36/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/quicksand/v36/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28360\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 20:51:09 GMT\r\nexpires: Fri, 03 Jul 2026 20:51:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470098\r\nlast-modified: Tue, 11 Mar 2025 01:07:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28360,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28360, version 1.0","md5":"f5533ba6e403a4420497fad8ff9c65ae","sha1":"d625878704bfe83583edf135a7a0391718b6231d","sha256":"8192446b20409fc7b5b7b00741bcb77cebcf615a3ee4fabc9ed6396ca88c0595","sha512":"d077dbf7fb0648767c1f24ed4ed5ab4a1ab6049b3c87e31ed6bc5d8346345a2fd0029c48af99914f937bdbfbbc0b3c536cced85f512b097334c384885a86f5bd","ssdeep":"768:wXbpQAkhhfcL0XJzpnOi3LOul8hiswwmF6m9MyxKY/7Tf8T3kU28H:wri9kLInO+Jl8hHmF1MyxKcTkTx28H","tlshash":"79d2e1e29d0950d0661f6e039a9efff4e2dc0e5e1170dcd24489518d1ed816afaa14fd","first_seen":"2025-03-11T06:38:47.221163Z","last_seen":"2026-04-05T11:00:14.29649Z","times_seen":2574,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-7.jivosite.com/widget/status/2478772/m6KjK04WZh?rnd=0.1401857655989579","fqdn":"node-ya-7.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.20.111","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:08.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2478772/m6KjK04WZh?rnd=0.1401857655989579 HTTP/1.1\r\nHost: node-ya-7.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://mail.forextraderinvestment.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 80\r\ndate: Wed, 09 Jul 2025 07:26:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e54973b37df80b16c3fbb3b303dbbb9","sha1":"9b3fcb6634eb5738821753f83569833d5b742d0c","sha256":"d3320eb940a6685a86507e500556ed37cb9d841719c7568a8c8d3152d2b60a04","sha512":"6d530fc277b9e60fdbb3db39e96dbfa465eaa7882948e60a958c2e1f5d3f19f81cc63a97df1e6bbde70ca139d7627a61b1a9ea3b51d20fed44888800896ef64a","ssdeep":"","tlshash":"40a02435115150440300c354d1c775010733010171f1d434f177700171ff5d005ff007","first_seen":"2025-07-09T07:26:46.588729Z","last_seen":"2025-07-09T07:26:46.588729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":175,"dns":58,"connect":54,"send":0,"wait":54,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/coin-3.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/coin-3.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2627\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 38, 8-bit/color RGBA, non-interlaced","md5":"e2ad270580d8356d891a27be27836aa6","sha1":"a739020088c9481b60ef1d24cbef79c4ecdb64d0","sha256":"6edbee7a10fe663fca5a4179dbfe89f29eb13f7742475b2b1c4e3e51f96a9594","sha512":"c46f14c68b702650ea50035ded77e831ea1151bfc716b58bfb7fb0195c4fcd366a6d446deb01f0e2543535379346a64ba1b0f310c7e7860903fb18d176ad0a11","ssdeep":"","tlshash":"1f513c7ca73252b38b187b332544066ae76f5c0d2907844ab9bd3af274684577a1e2ec","first_seen":"2025-07-09T07:26:46.589567Z","last_seen":"2025-08-08T07:31:51.733968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/ulka-2.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/ulka-2.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1624\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"e0194dd32c33e6045a3f9cd7ea49e32a","sha1":"9bb41d63d7a6d55a960695606437158f854e5567","sha256":"46cec505c47a721d07bd1db6a3c32fcf69a446f61d0c64a894d6f2752959e675","sha512":"ae4a89c9b34804e902bf109caa98e07c6773cb529892650e2fec368110c4944152160849cda006a591fc276bd7a40b85b278369c2c0386f1eb74badaa28bd9bc","ssdeep":"","tlshash":"9631e8671a55fc4efffb1537623a0b8bfbd01ab8150a048a553841cf29d28f48882e76","first_seen":"2025-07-09T07:26:46.590294Z","last_seen":"2025-09-22T11:56:21.075265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/images/cnd_pix/1121494282.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /images/cnd_pix/1121494282.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108391\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":108391,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 394x420, components 3","md5":"5afa01da8e93ed3655589e808d60197b","sha1":"79dd17c9b81ff011fc9f4ff85fc8c4c22184302b","sha256":"e961d55440a682ef196ba96a8cb460b82ba30a526f37b6697639e0cfd7e2bc10","sha512":"7ac42bb4eb17e543da83b710e6014501708ee6f9c8acaa8e0cd6538670d1b7c69810be788763949e37ee16e09edef1e87a0a2cb9f1bf6d4a08f1fcb2867ae3e5","ssdeep":"3072:HMd/Q9IWRo5b4iRv8QZmrmgqHb3ryjcHXvLv3F7cEbqWzj1:sd/Q9DmlkoQfS3rf3vLvV7Dpj1","tlshash":"aeb3126847cbacbe4e909674e7d3c07054b6870c6b835637b83c6a15834e793e9c0a6b","first_seen":"2025-07-09T07:26:46.591041Z","last_seen":"2025-08-08T07:31:51.795818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/random.php?data=87","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:17.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /random.php?data=87 HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:17 GMT\r\ncontent-length: 668\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Jul 2025 07:26:17 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1778,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5ad10c9711f30a636419f5894210ec77","sha1":"dbaaf65428df0cbcad7c352e02a77a82ab73d227","sha256":"3a742854b96f30c54ed3d247da53813deb961433b99620ae24247d165d7918b0","sha512":"371ccdb9d966af3b61c0883aa96ee6df329552d637dd458762bcd90cc638b4ebea5eb13a3af6ed1b1867d86aea137a07d2fa8b6e6718508d6a8125cc7f4abb14","ssdeep":"","tlshash":"7131ceb781c5f115613281a9e3216f38edca043b87071ae075af7dd7af748e984136aa","first_seen":"2025-07-09T07:26:46.591863Z","last_seen":"2025-07-09T07:26:46.591863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/app-right-img.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/app-right-img.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10633\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 200, 8-bit/color RGBA, non-interlaced","md5":"592c76b150dc1090e61fe395c9c0641e","sha1":"e478b4a84b329b07084b3b9a9a6af37f0c101604","sha256":"b0084378fb3c43b74e3e16755edcba383c6e2fc8813b43201601f872918a9271","sha512":"4926378eb7691475b429e29fc60aa717d64b14bd16e63111d2add26c0e1e7b4cab43737758f47aaa5b17a2c2b61cc280f001e88f7cfd44ec17249746a7fa67b6","ssdeep":"192:UxE12JI0EFO7raSTh91DFE8FUWUfCy84j1t3Yk9Cffo:KA8I0OkbW8qKyPj1Bz9CfQ","tlshash":"fa22c06761a70affa9230435e784d788ab299b7cd627208ce681f2d9046c38533d3147","first_seen":"2025-07-09T07:26:46.592628Z","last_seen":"2025-08-08T07:31:51.799423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/logo.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jul 2024 20:14:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7273\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 71, 8-bit/color RGBA, non-interlaced","md5":"791c65ec9a60f5735e7f74fb7d4ae815","sha1":"d82953319b6f495f797e908ae6c597328827f733","sha256":"1273c1f4ed00a6e0cea6745b7f1507fc195e1deb3ffceae0862085ffb833def0","sha512":"a8d68350ae36c5608f37872f42ed33dd831648f2697e3f299d70e1e73a6b2a069b82a93861ad72efe3efcb19181da484603f5763a7885251b8376320bf520fdd","ssdeep":"192:rSnknvf2IkMnMO4y61+q2PjV7APxGZoIF1h/yQExp4370DRl:eknvf2hMXPx7VoIjh/7OY0T","tlshash":"32e17d2edd40aa133f1aa68ab5f922575693bbd4845270842ddbc85784a067f8d1cbc2","first_seen":"2025-07-09T07:26:46.593366Z","last_seen":"2025-07-09T07:26:46.593366Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/random.php?data=84","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:22.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /random.php?data=84 HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:22 GMT\r\ncontent-length: 677\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Jul 2025 07:26:22 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1787,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"796c6669af6c1e511dd4d08974129ffb","sha1":"68c1ea1dca2194c4e4a799f18518bdc4ef1e2e01","sha256":"a3ca740c2df41fb544fac3c42270b2ae6076b55da33f7067e01739a04f5dd23f","sha512":"4aee67f3d1bed5a5478803ffcd9b2a2036752306e99741dd7367ba230bd392861af90605c1f503f90972bd211798ee5aa9691fb6d5b6d566ce7b152347badc7d","ssdeep":"","tlshash":"b431e0b381c4f5056672859de321af68edcb043b87071ae0b19fbcc76f348a5951369e","first_seen":"2025-07-09T07:26:46.594212Z","last_seen":"2025-07-09T07:26:46.594212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-09T07:26:05.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-length: 9185\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46976,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"af98c95875b3eb5f7cc55d5579cbaa66","sha1":"70c80c0c4db8e04ff6af0a3f9aea5822efecfa9c","sha256":"f3fc3d0149d7e43ef5ebd90cb7f374933df262727f155359dcf80bd3cd335533","sha512":"3d8a3534217f3e11cf5a030a3340e352c39bb34c11a70893fd0899a5e977b8c10487a2f52a719e4b0526aaa2fe468ef2d40f7b8930ef56745fb207146d117c7f","ssdeep":"768:Y92UbHhsJAdCczW+mOpD9r+r7CwkXdBUxhc/cWc76fDJ:I2UbHhsJAIczW+mOpD9r+r7vkXdBUHcf","tlshash":"1723412164f56433016381d279216b5eaf92d20bd61b5e5832fc4bee2fe3e92cd37219","first_seen":"2025-07-09T07:26:46.594992Z","last_seen":"2025-07-09T07:26:46.594992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":344,"dns":290,"connect":22,"send":0,"wait":69,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/coin.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/coin.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12527\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 83, 8-bit/color RGBA, interlaced","md5":"2b41c3d0bb8d3a9e5ac59f65649ee60a","sha1":"7cc5979da2633d3efbfae72428f5585014f0ea87","sha256":"274fa2337891caab0ca553f34a2411e9b9aee6208a6b1621bcaac16c9fa5944e","sha512":"fb9631697659f2e60ad78d3a11b2c560bd0f6a87ce71a5866b809be900b165c5f8c53d337d4b63cfc636b935a3051326e4268fe52902b745f357b338c13df5d0","ssdeep":"384:40w6p2hQyMLcKPPZ/+BKQsQ5Oh+B2sDhP:4Ip2hvtKQYQtgG","tlshash":"3942c01a7e106a6710d996f7a6f78c9f483fbd80c1123a28f9dfc57a06304e234b0396","first_seen":"2025-07-09T07:26:46.595742Z","last_seen":"2025-08-08T07:31:51.803739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:08.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 18:16:43 GMT\r\nexpires: Fri, 03 Jul 2026 18:16:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479365\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-04-05T14:36:32.59064Z","times_seen":40580,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle_en_US.js?rand=1751979741","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:08.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle_en_US.js?rand=1751979741 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 09 Jul 2025 07:26:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 263260\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"686cd6a3-4045c\"\r\nlast-modified: Tue, 08 Jul 2025 08:28:19 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-07-08T13:05:13+00:00\r\nx-node: m9-up-gc233\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1124666,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"5ae362620b0ecece5c78f39ba9320b20","sha1":"5b6fdb4a3244dc614c075063849d273e5dfcb750","sha256":"b8c67efc77ff65cdbe232f9a63c444f1146adeb8f36cdf5b9d20987b5d24bdb9","sha512":"3faf16c29c72af16bd3124870dd1b0c56a0ec3b0715c17f8fff7f26083c1e860abd0520bdd323c063b007ec593620cbaba46271bdd803268d31e796d6450d489","ssdeep":"24576:D4+XI5Q6t0phsjn4PuyYycjubSsVdOlkGO30ezHpofauDzHGIOjr6:DBX7hsj4PuyYycCbSashOEezHpofauDf","tlshash":"b5354ac5b1c0f46502d355e6a43b2009f23a2c5e7809b064f7bccddbea6659e6263f39","first_seen":"2025-07-08T14:01:05.521029Z","last_seen":"2025-07-10T14:45:31.595819Z","times_seen":24,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/data1/images/1ban.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /data1/images/1ban.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Jun 2024 05:57:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 103175\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103175,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=640, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1366], baseline, precision 8, 1366x640, components 3","md5":"1498e1eef0d63d74f859d46eb4bfe9f4","sha1":"a8f49b4cab7aed4228913a0596f641cb22a3bd3e","sha256":"5b312b83fc0afd9eaa686c0c106c83149651f69ee945ca1a6657233882016786","sha512":"4da271d2bcf8d9d997d692964ed117fdf14bc15a753fa7654715567a98c3aa5a6618dd276fe5df3287aa6cb52a868d71d21031e420fd684829f528ae54830e4d","ssdeep":"3072:bjYjOqlejZ2rhXiojSNQ93JrsLL981eGxZpXeZ:vGR0MrhydQ95MBcxiZ","tlshash":"83a3ad75ae2c4ac5edc23a335360dd20d238ae95435377a3bd3d3349bbad81851a522b","first_seen":"2025-07-09T07:26:46.598536Z","last_seen":"2025-08-08T07:31:51.737925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"GET /ajax/libs/jquery/1.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19926\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Jul 2025 11:19:00 GMT\r\nexpires: Sun, 05 Jul 2026 11:19:00 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 331626\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57254,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (39660)","md5":"bb381e2d19d8eace86b34d20759491a5","sha1":"3dc9f7c2642efff4482e68c9d9df874bf98f5bcb","sha256":"c8370a2d050359e9d505acc411e6f457a49b21360a21e6cbc9229bad3a767899","sha512":"abb2ad8b111271a82a04362940a7ab9930883ecb33497a1c53edcdc49f0634af5bf5b1bc7095bd18db26d212b059aece4577f85040b5f49c4982b468fe973c12","ssdeep":"1536:+vnXSI+9Escogo5uW8xbm5sIacSs0DEHUjnqTDUBu6VCdZWa:w8gdzIF0oDUstZX","tlshash":"b743e8d972c2753247eb6029347f930af2b664aa294d8454f078d8e5bdb0e04987bf7c","first_seen":"2023-03-07T01:07:03Z","last_seen":"2026-04-05T12:33:45.637011Z","times_seen":4085,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":364,"dns":1,"connect":16,"send":0,"wait":14,"receive":5,"ssl":398},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/images/cnd_pix/1059700645.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /images/cnd_pix/1059700645.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88592\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88592,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 394x420, components 3","md5":"86aa193d6a602d975499583498c22fc2","sha1":"1680acf7dea42195ac37ec60f7e5be64e9fbc9a5","sha256":"28b6fd351c608c34648bb5a350a2e53bad5226859c7356131576da0c341f8451","sha512":"6943c78125a2e364500b105147a41c2e81b68ddf15ceda40b3dee5d9f35c33384cfc21c15d2900760f7c111850d60aa09dee299b4f1e39735418e69dc983cc88","ssdeep":"1536:HDJ+hyRB8DUNmmQVl27o+r9RtlRCahZQ2fMAufyP4bXoFE35lyhkDfFy09MoFqne:HDJ+hOB8DUcs9R3RnhZQ2N+yMYqzDfFF","tlshash":"80830248dee2b1ae586d8695b1888e93504d131d4bad63bf73ddcdc243913b02face20","first_seen":"2025-07-09T07:26:46.600515Z","last_seen":"2025-08-08T07:31:51.773401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/images/cnd_pix/759640034.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /images/cnd_pix/759640034.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106041\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106041,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 394x420, components 3","md5":"11f77b06e1109a758b920f80faed9740","sha1":"88f1a7933f32afb07d8b3b6c959ee0b9090fa6b3","sha256":"b1f1240376ee06a69f3db475bd5b4722999303c0694340a02f30794ccc1584be","sha512":"f238f68dfb609572afc5030e80c5899e74253bf8ebc16c1d2849aeab551797861158a9b5f5675a048b004206762d8c45aba25ce33940918684f335072c51fad6","ssdeep":"3072:H/MRvntFnU0wdxiPR3+i/k1CIetnuXy0MRceM:kNtlU0miICIri9cL","tlshash":"b6a312182420dba0af5201a27ef96d740b2d0b609bdff486fbfd715cdf28a655214729","first_seen":"2025-07-09T07:26:46.601303Z","last_seen":"2025-08-08T07:31:51.800207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/footer-left-man.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/footer-left-man.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8081\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8081,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 222 x 295, 8-bit colormap, non-interlaced","md5":"a601ea265de1bab6cca60387bd76085c","sha1":"e668f25bbe5f5122135ea61f735233aa75fa9fb3","sha256":"ff96c7faec98de23baf45095be2cf8ec4931bb7fad5b44dc252963a66b78b435","sha512":"14376c7537bed3d8d0ebd1043ca916b16d9d5e410f122119536679123e52473bf768f9be300df7add9163c159ad394540996de5810e1fba30c89989a1d0d0750","ssdeep":"192:iRlGE0Kkc6HxmhpdRDmG6dGx2pFnE801QHp:2ipHo4dY2M80iJ","tlshash":"b6f1bfe9f12c61ecf4e9ba33fc592c8d43543d29b1a88995630f55ce48e4f367184285","first_seen":"2025-07-09T07:26:46.602241Z","last_seen":"2025-08-08T07:31:51.7559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/owlcarousel/css/owl.carousel.min.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/owlcarousel/css/owl.carousel.min.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Apr 2024 05:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 450\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1084,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, ASCII text","md5":"1d58e298e55826f6fd28d28017ce38fc","sha1":"5e84df8a75c4d417fae3cc6be33355f64c54bc70","sha256":"2584bd3209076c426686ee9b24751de697e60bc1a1895f2a57961e33274c8545","sha512":"743e733581cf3ce60058cc330eae5243ee3dd26a70e19cd689ca3b31706cb9c5a54460be551ac00c6f3593d74d4dde46db03c647f8967ea33acdf73b81435a49","ssdeep":"","tlshash":"7911660bd142a47ec4120191f9414b60611d461271df5fe026aff19df6cda59852e7fc","first_seen":"2025-07-09T07:26:46.603096Z","last_seen":"2025-08-08T07:31:51.757429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/images/cnd_pix/192265998.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /images/cnd_pix/192265998.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 61821\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61821,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2020:02:06 19:59:31], progressive, precision 8, 202x202, components 3","md5":"c0de836f457f813aca6cffea01d6572a","sha1":"e994d92b17ac7ae09307086397bbf96346a4a756","sha256":"c2df058fd2dc891c2716930aad89639c0ac4342624a2ae7c12b9e8e66b865da9","sha512":"ac2c9f25fb2752aa728795c63cb1f756d286241f92fa2ef9ca37e0a15de26f48b9ae7a73c07a93d3d8cca754cc61aee35803dd704177b184bdd0d0ffd709e961","ssdeep":"1536:cj64Ej64asiy1w6UJajO0e9gi1d588hxTnCa:cLELkx6QajO/9gq8o1","tlshash":"cd53e03cfb57de23f8f2ea78d8b1e78253925725c7231686385c5b1977a22c04c890da","first_seen":"2025-07-09T07:26:46.603998Z","last_seen":"2025-08-08T07:31:51.747097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v36/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/quicksand/v36/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28360\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 20:51:09 GMT\r\nexpires: Fri, 03 Jul 2026 20:51:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470098\r\nlast-modified: Tue, 11 Mar 2025 01:07:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28360,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28360, version 1.0","md5":"f5533ba6e403a4420497fad8ff9c65ae","sha1":"d625878704bfe83583edf135a7a0391718b6231d","sha256":"8192446b20409fc7b5b7b00741bcb77cebcf615a3ee4fabc9ed6396ca88c0595","sha512":"d077dbf7fb0648767c1f24ed4ed5ab4a1ab6049b3c87e31ed6bc5d8346345a2fd0029c48af99914f937bdbfbbc0b3c536cced85f512b097334c384885a86f5bd","ssdeep":"768:wXbpQAkhhfcL0XJzpnOi3LOul8hiswwmF6m9MyxKY/7Tf8T3kU28H:wri9kLInO+Jl8hHmF1MyxKcTkTx28H","tlshash":"79d2e1e29d0950d0661f6e039a9efff4e2dc0e5e1170dcd24489518d1ed816afaa14fd","first_seen":"2025-03-11T06:38:47.221163Z","last_seen":"2026-04-05T11:00:14.29649Z","times_seen":2574,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%20Condensed","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:12.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"GET /css?family=Roboto%20Condensed HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Jul 2025 07:26:12 GMT\r\ndate: Wed, 09 Jul 2025 07:26:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2569,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1641f5bfe2118b27f48792ff1cdc339c","sha1":"8b9a2e801a18aa717e326f016efb13573c17e124","sha256":"ccb4691cd77bd25d343e98beb5a981adbc8c8f8e2936249371a4a79780538002","sha512":"687c3a9ac466b0162e7dd59a1cf6e168ddf63de317997290adf135d93108cc6c1b003a3fd58e465abb6a500cecb5b1e7bc00d3af90032c9daa0827a4fab8de55","ssdeep":"","tlshash":"c3519991082ba404e7d31cca2acf7e2adc4e12046449d5a5dbfd1c69acf6e76236834f","first_seen":"2025-05-30T21:55:41.913966Z","last_seen":"2025-09-11T07:59:14.657026Z","times_seen":262,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:18.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mail.forextraderinvestment.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1192\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://mail.forextraderinvestment.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 09 Jul 2025 07:26:18 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-04-05T14:45:13.130561Z","times_seen":480337,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/wowslider.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /engine1/wowslider.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 05 Jul 2020 15:42:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8962\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25355,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21722)","md5":"9645de12bf92dde68b0336b71ab8ccef","sha1":"2c76ffcdbdf9edf88025e7aa80ff6f639f95b93e","sha256":"456f37a7bb9a4837c6c62ebab7677430ce56efef3b5f59483490c6214a294ce7","sha512":"58b4dc92f430ed9b7002ef2f49e1f5c8a2fbf4e1c854dcb0ad0c50fa3e58c2010e7b03f7b04157d63b3e7e4fc1a76526f431994ba8c41418211307a8df973f62","ssdeep":"768:uLhf77H5hNoCc+KTRkklHO7VS1HREWtdkg:u57HTprKTRkklHO7VS1HRPn","tlshash":"56b21a957b60383981ebb271628f5bcff23580725e02c4a5a079e8582d7cc59127ffad","first_seen":"2023-03-07T01:17:34Z","last_seen":"2026-03-31T00:45:02.949138Z","times_seen":28,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/app-section-design-object.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/app-section-design-object.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22264\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 957, 8-bit/color RGBA, non-interlaced","md5":"837e72f07f223ba97aff4b3791e230dd","sha1":"ec625b82e950862d08afa3323266c2961a6974b2","sha256":"b9834eb4753af17adcb51d18afdddf21a064bf12f2576c525f13d4b9c40f3895","sha512":"0dac5acfc7aca956da0dd126125683978fd135d41b3864b4b3e90f137061c3341443ce57aa7f64fd95210b5b5d56bcdb39cda0dfabf0fdc4acd4483507dffd2f","ssdeep":"384:ZT7A0XWlQmmjFXF86fVrmBPpLSnDm6GuHdOShA:NGmn80ropWnLOEA","tlshash":"69a21a9149e2e5f9f65d883821db5fbc77501b2600b1435eabbbe5786de27bb8c13020","first_seen":"2025-07-09T07:26:46.606166Z","last_seen":"2025-09-22T11:56:21.053441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Jul 2025 08:13:08 GMT\r\nexpires: Sat, 04 Jul 2026 08:13:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 429179\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-05T14:47:51.903491Z","times_seen":716802,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":93,"dns":1,"connect":28,"send":0,"wait":31,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/jquery-3.3.1.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/vendor/jquery-3.3.1.min.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29665\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86929,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"378087a64e1394fc51f300bb9c11878c","sha1":"0c3192b500a4fd550e483cf77a49806a5872185b","sha256":"4fe68fa216176e6d1f4580e924bafecc9f519984ecc06b1a840a08b0d88c95de","sha512":"9a2c70516ea0c8c37c7f072f214de0afd5ddeb643c6b5d3fa8ade3ef8d2ce40bdf8b1b1194bad296e9075562701ee7dae48b18144b1cd2d735328be5a3accbe6","ssdeep":"1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6ta:+kn6x2xe9NK6nC6E","tlshash":"208319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-04-05T09:54:08.770254Z","times_seen":4019,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/js/vendor/jquery.countdown.min.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/js/vendor/jquery.countdown.min.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2245\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4145), with CRLF line terminators","md5":"041ebf68974409d8ea26ed60bf6a27fd","sha1":"68e7411a5c5a6bdf80cea5038ef155326a78316c","sha256":"8da7b0eeb54bb48a76f221e813cb76a40d40fc9f564405b4cdea677243288309","sha512":"0228fc38967987ad21989320f9a6aee1a7662e3b3066407c67b59f5e5b10627a8216f3f9fcd89e84c1994365d4aa28b82be6f70ac3c863403ad66948e5282b03","ssdeep":"96:GBXpuplQHIwcCeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7/:rQH9UpxGhdBqztJxMxHxqxAxixw3xexg","tlshash":"05b1a5ceb3b223d508e553a201ae1116a23bf15be4d6001cb5fceac87a75c9d606fd78","first_seen":"2025-07-09T07:26:46.608723Z","last_seen":"2025-08-08T07:31:51.744521Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/css/magnific-popup.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/css/magnific-popup.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1660\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-04-05T15:07:36.856779Z","times_seen":21383,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/images/s_attention.html","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /images/s_attention.html HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 13 Apr 2024 05:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 434\r\ndate: Wed, 09 Jul 2025 07:26:07 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1042,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"724b43d0f4ea9aeae90faa0f32719824","sha1":"4368db36ee3553d45f2c6b7f81d03216f47a78e4","sha256":"aed932db29346d252f7c73a39c51cf482c2210975a3ab268dde06cb11647807f","sha512":"82069b78ac8fbfd6f3fb92d2930067473f0ecf0cd873c757157605bc919da07f1f1066d67d7623f6eff1f281dac3ac6ae2572a8ad628308621dd45d6234ceb35","ssdeep":"","tlshash":"2f11425bd186b55fc0270091fa404b2061198262719f0fe07b8ff18af5ce29a8a3b3e8","first_seen":"2025-07-09T07:26:46.573499Z","last_seen":"2025-08-08T07:31:51.75024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/favicon.ico","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:08.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/favicon.ico HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:08 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 13 Jul 2024 20:14:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7072\r\ndate: Wed, 09 Jul 2025 07:26:08 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7995,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"2a37101035eae39896e9cad33ac2557c","sha1":"5277d753e4d317f5229ffc9dc8fa99bb84569da1","sha256":"23f211d1b43865be6b1e153eac3ff7c614f8381d93eea350e2933e2842ef2ca7","sha512":"c13c884e2c65cdedd2e4fb301eebcdb47160880a42c624ee62fa14ec0948450770cbcd070c6fd95affaf75bbcee6d8d22f55f497f1a64a8e42ac74da302796e9","ssdeep":"192:/CX+w9hUMRwlsSakn0L6hDYIFOf3qtdCOwkbDxkFVphdVIEKk:ax2hpn0L6hDYga4COwoNkFV76k","tlshash":"baf17e5df955e8619a8abf0874f6b1c36fb30be04bb065162ced4912ff125f08e59087","first_seen":"2025-07-09T07:26:46.61008Z","last_seen":"2025-07-09T07:26:46.61008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/footer_logo.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/footer_logo.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jul 2024 20:13:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7273\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 71, 8-bit/color RGBA, non-interlaced","md5":"791c65ec9a60f5735e7f74fb7d4ae815","sha1":"d82953319b6f495f797e908ae6c597328827f733","sha256":"1273c1f4ed00a6e0cea6745b7f1507fc195e1deb3ffceae0862085ffb833def0","sha512":"a8d68350ae36c5608f37872f42ed33dd831648f2697e3f299d70e1e73a6b2a069b82a93861ad72efe3efcb19181da484603f5763a7885251b8376320bf520fdd","ssdeep":"192:rSnknvf2IkMnMO4y61+q2PjV7APxGZoIF1h/yQExp4370DRl:eknvf2hMXPx7VoIjh/7OY0T","tlshash":"32e17d2edd40aa133f1aa68ab5f922575693bbd4845270842ddbc85784a067f8d1cbc2","first_seen":"2025-07-09T07:26:46.593366Z","last_seen":"2025-07-09T07:26:46.593366Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/data1/images/3ban.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /data1/images/3ban.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 08 May 2021 23:37:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92878\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92878,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2021:05:09 07:37:19], baseline, precision 8, 1366x640, components 3","md5":"95d89db727bb4aa7c00f50b5fcd247f3","sha1":"be8baedb455ddbcd4afe2570ab6ba7d9eb07ac04","sha256":"b6dc1c3c70cec69c85d156c4866bffa4534c92141fed58fa0c86fde4b40d2a44","sha512":"e27f8ff05b5b18cc615929fea5d808c7a2a7567cc94130d110df76a701dbcef9cebac9fff2aa40a1a72a0fbbe7d2bed2b0ea020eef92ea9cb4d499fa1449c34a","ssdeep":"1536:PkjXkjuA66y2Aj8RI8Q5Q3OMN/Xy02Hgr8RDtgRX9Niem2DHl21ygGkdFWqmcDAQ:8ot8jz8QzMNPkHQIDtQXryoF21hGiFWU","tlshash":"a3939d32ab2c4bd298c6b8b74361e87597354fa0236366d7fe7c2b483b99d21443419f","first_seen":"2025-07-09T07:26:46.610973Z","last_seen":"2025-08-08T07:31:51.764095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/round-circle.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/round-circle.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37740\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 513 x 513, 8-bit/color RGBA, non-interlaced","md5":"b6a6dcf9a1a3ff9a53de7935f396c8f5","sha1":"65a99aa54a59cb7164fdda41dbf40f1845a91e7e","sha256":"864b08860ef8245509c4c24f12474eadbdef9ed176f04c11c70fc60921b424ec","sha512":"19a6f0fbb681d8c35397a829b544194ce21b41cf652d69a4dbf86cd494a78e07ea2d3e55d8e6e34a20d7d722828c44b470347f30f95605c1400ebefe6b7888bd","ssdeep":"768:px+t28fYLwKhoV42ga8Owl7gT91l5bL36Vw5tFVrz0CgFk4xV:pxE2fwl42ga1wBgT91X/6Vw5tLrz0Cgf","tlshash":"7103f1c3e7112287eb69e86983e4b3b387d299370b36107057df9a606d08f4a1d37635","first_seen":"2025-07-09T07:26:46.614616Z","last_seen":"2025-08-08T07:31:51.792709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/arrows.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /engine1/arrows.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/engine1/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2020 15:42:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4380\r\ndate: Wed, 09 Jul 2025 07:26:07 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4380,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 102, 8-bit/color RGBA, non-interlaced","md5":"eaf1c34c6f0e8066db6f13ca32e98fb8","sha1":"d183981f2f188b8662713a3069eb8133f321af78","sha256":"ce3d06b6dd621bfa8c21a078bcd24792467fa79e8cbfcf32abc52b5872167fb3","sha512":"2db54f0fd1baa67dae1cb7c62ef5cf9bd49cb1a9ef1b57799dc661a9a7beb48c3354cfcd8afef366f091c63b7853cafeb875a8e8f223289b817eb36dcc28cfca","ssdeep":"96:zZ/I09Da01l+gmkyTt6Hk8nT53NrefVyY7:zS0tKg9E05T59SVp7","tlshash":"12915cbed820986eb8dc74160c8a92c1a76442ec455f3b68d4d0a4ddd415c5a9f92070","first_seen":"2024-04-30T02:01:13Z","last_seen":"2025-08-08T07:31:51.801188Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v48/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Jul 2025 08:13:18 GMT\r\nexpires: Sat, 04 Jul 2026 08:13:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 429169\r\nlast-modified: Thu, 29 May 2025 23:37:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44192, version 1.0","md5":"1c278435b6738e80614efd67b0aa1d75","sha1":"553a407dccbf2e476e53a88b9bd5c625c48d8f99","sha256":"9ec9eb9108f1752c30ba316606858d685a112a609d8bef1fb3d5d32c8e0b6507","sha512":"7b05bc06e51a460927d557deb8deea554c692b6edd381ed2e1e98daebb026b3de471c56278114f48a31c075d2dea30200acee2f2a804246bdfde61be1487f9ee","ssdeep":"768:dji8cRMN2W5RiThDSklZ8iD/ZbANTt4V7NIPuezvbzstqP+l7rx4HDgcq:dteE2WriTsOhzVMfTEqPI7rxkDPq","tlshash":"d113e17ba74b08c0638388b867367bedf5e5c0218b5c5ef85221f481f20d759a6d92b7","first_seen":"2025-01-09T01:43:24.38206Z","last_seen":"2026-04-05T14:56:35.965325Z","times_seen":34931,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v30/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBO5Xw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:12.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/robotocondensed/v30/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBO5Xw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 17:15:32 GMT\r\nexpires: Fri, 03 Jul 2026 17:15:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 483040\r\nlast-modified: Wed, 28 May 2025 16:58:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20820, version 1.0","md5":"1c36c62fd135c15a91ab0a4695409942","sha1":"fa9aa47b97d7ff65331266954194444fd76dd81a","sha256":"543c03fff71d1b39590af102e0852c2dbce46f4dbe4faaebafbef6edc82e78f5","sha512":"7ec543d40b71834ed3978fcff0b36e766d7533b5e4f9feedad8a846920b1c81be6e37037d393066c701472cb719de810061168faf6b2b5ba6df28621c456a6b9","ssdeep":"384:gFvHBr3tu3hnGbhqf1GacPOwMRN/bcH6LMI4nOF9ZgzuWe2uA0bC+Rm6nViIxh:4l3tuxmAgfP7MDbC6LMI4nOFzsW2ulCq","tlshash":"0b92e1e8c5266d8bc49595351c629a2388ca642ef46d3ccca92ced25bca162e4e370c2","first_seen":"2025-05-30T09:26:46.375942Z","last_seen":"2026-04-05T12:50:27.061928Z","times_seen":2489,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/data1/images/5ban.jpg","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /data1/images/5ban.jpg HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Jul 2020 15:33:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 97734\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2020:07:05 23:32:57], baseline, precision 8, 1366x640, components 3","md5":"1f3cf5877013ffef3a4ce57eb3a1bf8a","sha1":"72c99027da5663e46cbf04286fc278559bb50fce","sha256":"03c3b841ac612327ce48be085364f6e0c88250a86b403c640ac87823ed8673e3","sha512":"cf84502adf75937838797aafca537d42e6eb26a766cb87023e5a644b1a5fd934170706473a845ec1d5312eca37d9d81a315329af19129d7ca9b5753a53c2ddcc","ssdeep":"1536:PaSag+rn27SlXMkacwmCeQBx7XtnCsUgQjFUbr4U6fO5nQ8IgCKxlBazlTHdiIll:PNCn2u2kYmCeQBxDtnvuADQzgCKxPYxB","tlshash":"95a3d0222a684fd0cac238334641de68d7312fd44a137bebfcbd231d6b96d558469a1f","first_seen":"2025-07-09T07:26:46.617184Z","last_seen":"2025-08-08T07:31:51.794883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/ulka-1.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/ulka-1.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1201\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"a1aa7ee51cf298c3583e5e22fd93c036","sha1":"5ee64f9418a081e8976cfae743e792123e90795e","sha256":"455115dffcdd4deb1c01a4ec942df9dff22aa185e91a18e4453233cb228865d7","sha512":"db00ea52cdb3b1646aa617af6d127e5e473227798dcb564106ff4df5d07df08b6c9ff0d7833058dc0439a9982861086d433c95056d04ea32c32d7966aaa2f3bc","ssdeep":"","tlshash":"25210a3d8d255cbfe00fb8571ac7da98ddad5f35c06ad6006e1ac8fe1c0e9c304982a1","first_seen":"2025-07-09T07:26:46.617868Z","last_seen":"2025-09-22T11:56:21.026113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/coin-4.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/coin-4.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2998\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 47, 8-bit/color RGBA, non-interlaced","md5":"0e8856cd7bbc3a56da05417e218be8a8","sha1":"8c23b3caf852ad076a9127025289d0fc503be263","sha256":"259ee4bfea162cdaa0d02c425fffb4f70f3b461c7f36eb3b542ba9346c87645a","sha512":"0bc6cc1a7698f47229908cb5fd69ac1aff36f97f97ab21c8149c2812375b17116eb4ac3dc18e45e75907bf4e20351f677658b1dc7359236f5a60499b63976fe8","ssdeep":"","tlshash":"89513cb4e5cb903863866db4947d046091db65ec8a95cb6e2cf6f8d54c04acf2407fe1","first_seen":"2025-07-09T07:26:46.618542Z","last_seen":"2025-08-08T07:31:51.762157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Quicksand:400,700|Roboto:400,400i,500,500i,700\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"GET /css?family=Quicksand:400,700|Roboto:400,400i,500,500i,700\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Jul 2025 07:26:07 GMT\r\ndate: Wed, 09 Jul 2025 07:26:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29357,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"cfd9c4532a32dd1aac4a1d53ab8dff64","sha1":"b54f41ed84d4542d8e571cadf00b3d331d2fffb0","sha256":"bc4d1699e13ae5cfa5f2390693fb6a5d4245be0dfd4a4cd9b49973a8baebcc55","sha512":"cee9f0015d735156211fc97992e0f734400af23e8f81bf320ca9581171d83bd1f378ee65c236dd6d0b0643ca41fa838e57fde0a2a8316ed5812cf1e7cad5dafe","ssdeep":"768:kqK9KaEe9cowV1S1afeS3TA2/MoOf/i/3gBknTOE/NkcKHuh9OO/jum2:iqApVn","tlshash":"23d230a1041b5040ab835ce223ce7e34fe0f92547141d075abfd9b6beddbca6526836d","first_seen":"2025-07-09T07:26:46.619163Z","last_seen":"2025-08-08T07:31:51.789433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:07.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.forextraderinvestment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Jul 2025 08:13:08 GMT\r\nexpires: Sat, 04 Jul 2026 08:13:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 429179\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-05T14:47:51.903491Z","times_seen":716802,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/script.js","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /engine1/script.js HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 05 Jul 2020 15:42:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4783\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16351,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8029)","md5":"470c7933aeebbdd7c846390c8d4073f6","sha1":"ccb70086d99f31f3c545c2550fb7c700ebfee8ae","sha256":"f2af295712fc6ae4e25bf1f323841cc9ad71295c2aa899c065daba5e4ca6bbc6","sha512":"0dad005afebb87fbf2760c3ad5713ee58e80d5a14dd938ef999134dd18dee79a262d4f401cbb98708e25a31b6d27ce0710db31599fe99103c3b889eae83dcf3d","ssdeep":"384:nCCoEdoDHeq1chSDgGG1O8Gc5endhi6Wqu:CCocowHr","tlshash":"5e72e8587f707d1446fae16160ce9bccf27e90629a62c828b310788e499dca4177ff67","first_seen":"2025-07-09T07:26:46.619885Z","last_seen":"2025-08-08T07:31:51.73191Z","times_seen":2,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/net.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/net.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98039\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98039,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 714, 8-bit/color RGBA, non-interlaced","md5":"140fc8f355ce797e0c71d75e66123e8f","sha1":"311ce3a64ef0ffb6e18102123072610565979b04","sha256":"cb994a202ae34dae3f278ed8270a8cd46f65c16ecfb1c40f7f4bcb8e8f157a16","sha512":"e6e6a3f24aa59da9547676ea49a13b6fdad34defa6f51b4db5f8531d532a31cb147901af0d0a3c1e17947d1408b396f24df416f074ed012bba4a9280f9acf22d","ssdeep":"1536:BE72NfdiJb90AhTmPvYX45Ide15kNkJB77Nb07gGuAt+gbLzaWURKBo0mTWf8QQX:BAswSe25ky1794gGuALzauBo0Sf8RUii","tlshash":"4da302c13d3a0c57f29e8e2e5c7b4a6f247520cb45ec27bbc800672126be6e8575a4f5","first_seen":"2023-07-18T14:16:45Z","last_seen":"2025-09-22T11:56:21.061943Z","times_seen":4,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/assets/images/elements/footer-left-dot.png","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /assets/images/elements/footer-left-dot.png HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 09 Jul 2026 07:26:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Jan 2021 04:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2079\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 100, 8-bit/color RGBA, non-interlaced","md5":"01708148225b6df70c180d3db64000df","sha1":"58416c4c0af03f209c65a26bb6da230605479198","sha256":"a8f373c55501f83db8b2a7f9e13ac94db8136ec0e5233ce40a0ed935037a2cc7","sha512":"66c12afe52b6aa181887841e87f68cd85e0d9dcea15afce1977f1a103475fe72d14da1cb68788682ed4820ae95231e6abdcf752caa0f302f9cb78173610c0c37","ssdeep":"","tlshash":"a9411848b2a02d2c1c022cb351a762383a76c5639e1244cf0b1cb56fcc8523e171317b","first_seen":"2025-07-09T07:26:46.623039Z","last_seen":"2025-08-08T07:31:51.748421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.forextraderinvestment.com/engine1/style.css","fqdn":"mail.forextraderinvestment.com","domain":"forextraderinvestment.com","tld":"com"},"ip":{"addr":"5.135.37.191","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.forextraderinvestment.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:24:03 GMT","end":"Wed, 01 Oct 2025 22:24:02 GMT"},"fingerprint":{"sha1":"06:76:6D:24:80:66:C9:C3:54:13:E7:19:A1:08:E1:08:C2:4A:F0:AD","sha256":"0B:E0:98:8C:DD:2E:10:31:E3:EF:67:6C:02:96:CC:B7:DC:99:DA:0C:21:FF:8C:B1:64:09:FA:C0:E4:7B:F3:57"}}},"request":{"raw":"GET /engine1/style.css HTTP/1.1\r\nHost: mail.forextraderinvestment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 08 Aug 2025 07:26:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 05 Jul 2020 15:42:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2339\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8081,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (501), with CRLF, LF line terminators","md5":"f5bee72de19678e289a0ea017234ffd6","sha1":"15b5423fffef1f848968d7b9f9890b838e566337","sha256":"d06ca64e4c37cc7d030d16acc60a1e528e771e4a4c556b9a1629f39cd7d88bf3","sha512":"8b3d7c04882de8060659809e95199abf1e1a9abad1fb7080e8172d7e3e9d4d961eaf337e40800131a33de0efafe94435003db72d484f79fdb66e0f643adc0d03","ssdeep":"192:uvyfLbOv0CZiuQoCck5DMo/ZBGe6g8XGvqd7qd9qd3:uvSbSibZGe6g8GqxqbqV","tlshash":"06f1be350f01b258f862de0c3ab5eb34ef68410aaa4a4edef8e5f255d2c87845219bd5","first_seen":"2025-07-09T07:26:46.624031Z","last_seen":"2025-08-08T07:31:51.758136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-09","alert":"Sinkholed","trigger":"forextraderinvestment.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mail.forextraderinvestment.com/","date":"2025-07-09T07:26:06.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:01:48 GMT","end":"Tue, 09 Sep 2025 20:01:47 GMT"},"fingerprint":{"sha1":"0E:29:D7:DB:FC:32:8C:DD:65:47:B5:CC:0F:62:04:EE:7C:AE:80:42","sha256":"69:D4:7F:65:C8:4E:D9:C2:A7:07:4D:7E:49:77:C4:42:53:99:A4:52:83:7A:F0:39:F6:B7:63:7E:C9:35:F9:51"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.forextraderinvestment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 09 Jul 2025 07:26:06 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78684,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1785)","md5":"cc8b23b3c4a8673edcb1377017676772","sha1":"8f253f3f66e8bee386b465e7b339208f770de642","sha256":"7112d799a5117183b7f965d1eba4e2c5c8c6cc30a62c22ffb71ba4e69f46919d","sha512":"23777c7a17da1edee1a6b665c765a632b582e5c15c1275576031eaed980951bba1fbebc9d5f0a21ac6578342037dff4f4c3e1eabab1b9d058d40e57756aad5a8","ssdeep":"1536:Xk5O7XwbLUNapDU/X/8CpIKKKbubmpja7y1GOT+WmiWwNW37:XA4UpA8kKK5THmio7","tlshash":"d373c8c8b6a674668267f5b5513f000fb23b58a9e84c4cacb288d8f16df4948417bf7d","first_seen":"2025-07-09T07:26:46.625002Z","last_seen":"2025-07-09T07:53:35.115629Z","times_seen":2,"resource_available":true,"data":null}},"time_used":866,"timings":{"blocked":378,"dns":39,"connect":15,"send":0,"wait":48,"receive":0,"ssl":382},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}