{"report_id":"182d1645-8d04-49c7-b5cf-55f36215c27a","version":6,"status":"done","tags":[],"date":"2026-04-30T10:31:26Z","url":{"schema":"http","addr":"nixotradex.org","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"title":"Nixo Tradex","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nixotradex.org","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T10:31:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-30","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/0980151a/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.youtube.com","ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-04-27T01:45:38.866329Z","alert_count":1,"request_count":8,"received_data":3591883,"sent_data":5308,"comment":"","tags":null,"fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.cryptocompare.com","ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":265475,"first_seen":"2015-07-15T18:30:01Z","last_seen":"2026-04-23T05:44:15.427194Z","alert_count":0,"request_count":2,"received_data":9093,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":8,"received_data":300720,"sent_data":4399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.tidio.co","ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-04-30T02:55:13.778396Z","alert_count":0,"request_count":2,"received_data":1070,"sent_data":822,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"142.251.142.246","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-04-27T01:34:56.80606Z","alert_count":0,"request_count":1,"received_data":73216,"sent_data":556,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2026-04-26T05:50:48.845645Z","alert_count":0,"request_count":5,"received_data":71079,"sent_data":2409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-26T22:38:44.781388Z","alert_count":0,"request_count":1,"received_data":63420,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-04-30T01:34:21.178024Z","alert_count":0,"request_count":8,"received_data":1736723,"sent_data":3767,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-04-27T00:31:44.668596Z","alert_count":0,"request_count":2,"received_data":130175,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":1,"received_data":23861,"sent_data":576,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widgets.coingecko.com","ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":3132971,"first_seen":"2018-07-05T11:10:42Z","last_seen":"2026-04-28T14:05:05.668575Z","alert_count":0,"request_count":1,"received_data":231844,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"node-ya-4.jivosite.com","ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"domain_registered":"2011-05-06","domain_rank":930580,"first_seen":"2023-01-18T09:50:44Z","last_seen":"2026-04-25T04:00:27.501525Z","alert_count":0,"request_count":1,"received_data":703,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nixotradex.org","ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":44,"received_data":3193650,"sent_data":51878,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-04-27T01:34:56.96102Z","alert_count":0,"request_count":2,"received_data":1201,"sent_data":1185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.getbutton.io","ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-04-23T23:12:51.171927Z","alert_count":0,"request_count":2,"received_data":885412,"sent_data":859,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate.google.com","ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-04-27T15:35:50.18066Z","alert_count":0,"request_count":2,"received_data":440,"sent_data":928,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.coingecko.com","ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-04-25T19:36:39.361844Z","alert_count":0,"request_count":1,"received_data":5290,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"97027e33bc73ec4a92d99b4965c156bb","sha1":"b2a12c08e2c30aa4f97c9c86e8ebce264d077a68","sha256":"42bef824e0919c432328f4b94164e33a57c7eee00d11b8bf82dd086f84311a5d","sha512":"fcd7be178d519008f8595ed88b9075923a0521ec3b97f2698b128447527564f34294dd5ccd77a3d738bafbbe50f60d0cdc14a3e0501bf11ec138f976ea6ca95e","ssdeep":"","tlshash":"5f90028921926664751970619126625676151480485914584624254078544155113a5e","size":49,"data":"","first_seen":"2026-04-30T07:01:35.956956Z","last_seen":"2026-04-30T14:33:24.218411Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"89c0d88b9efce94c640662aa7371fad8","sha1":"65de619f964169486d6eb18050d5935af9178967","sha256":"e9e46635ae7f750735c734ec81dd5fce0808f67aaf16f0ca565ac410fa20cb81","sha512":"25e3fe2f125d45df3e611ac5f0c2279609df14bfd7076f71716a04de784e032054b06e741f606eae0b3aee61b879939ff17842cb2f8042e1bf7ecdadac3b5bf4","ssdeep":"","tlshash":"55f0e54ff8da32952233765d2fb78410ad2d184fb80eec4c3c8e89d05f3b0089052b58","size":446,"data":"","first_seen":"2025-03-18T04:27:57.51204Z","last_seen":"2026-04-30T14:40:38.644373Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"45d10a447db4342e490d0d95e62a151a","sha1":"2b8c17b53cd7ad1c3b5e6b2d93f6ad17f2515497","sha256":"e1c1678cf80a09815a93de15f7c6e5f2f89e2c06156472ef98e55f9a05147583","sha512":"93e245407d3c82ed454e9a504cb51fd6718d1bf62dbdeec4632da2305c7573ba4b15e874e8f6e225bf2984da1cce463a19c6ec93bdb6f02ff5d0014386d60792","ssdeep":"","tlshash":"e9c080646714781d710f122101571755f355048f1514099199671d416934abcc217549","size":158,"data":"","first_seen":"2026-04-30T07:01:35.863347Z","last_seen":"2026-04-30T14:33:24.174444Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"9dc52560bcaab00691f3d54f85199cb4","sha1":"75dc667f72f489b7683f39064bd2a7d4c4326c9e","sha256":"b99362e1684a7512c6809553c97c764faad09ad15cff848131088f625a374055","sha512":"4bd01848d809df3793ccbe70b9e8caa20be72f7e062733bdbb9ade71248e02b8ab1438afea6f4c5c30a10ba67001b4d0eb209207e942770b52b5bde38271ed06","ssdeep":"","tlshash":"dba002b877c65010829f26a42de71c84b5ad44a05015d9ea5824d5d55e6dc35412ed6c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.79346Z","times_seen":934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-30T14:35:48.293483Z","times_seen":634939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/livestamp.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","size":1414,"data":"","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-04-30T14:40:38.626328Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"91323d54b00864474ed61c2be5e18e67","sha1":"ae038ce1bf8b640b48ce3983824e467230296cf6","sha256":"73c3d0adf34b891b2fcc95e4272d9a059675352b0ea2b9d213036edef61624c6","sha512":"916ebca7a0baf11dcc3d914092678c1ec765b4ceb2c5496953526ce2785a9b34f2532246c60ce458d7107643116228bd1891fe08718821002759be1e3a6059ad","ssdeep":"","tlshash":"db9022b022c22000830222a020830880e028802828008c02800080828cb00223000a2c","size":55,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.699981Z","times_seen":661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e02bbe4f39f5396dd5d572be55ccf6b6","sha1":"2c7f3a1893f0241500b491fd44bdad5fe65cdcfa","sha256":"b4086e30ce80397b103e75a611c8cfe5cc1bd3f59f9627bad7b5c3f320b6ae11","sha512":"cc85c5fa62181ee055c7f29c2d1027719526b772b79b4a87bc942fe6b5205c89caa2b666fff1596360839538c5529d610db1a2d7c4b320259dc812389ecb2ab8","ssdeep":"","tlshash":"c71000000000000c000000000300000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-28T15:00:20Z","last_seen":"2026-04-30T14:36:51.916981Z","times_seen":4071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22861cb428e67672b34fcd90e986d0d7","sha1":"7c016c98bd7c4236ede2fd0ebcbc39f9a18ab4e6","sha256":"008a88ae8350bfc310d716bc2b59ff94d8dbc90d42ca53c6216daadd11e5f5f5","sha512":"43949c32f78a79c56a4438eb81cc81706e46f1207cf7bc4f4493702bca92c56fc7c13f4bbc2385aa4b9bb89606a1f1c17ba8c8c63789c25dacb9886568786ebd","ssdeep":"768:bwetgLjG2tOwfTCEFkpPJfa/ZVwRKONt9EZVjYxAjcGAAMvWfRdtata2YFfuLVT0:bwei33FoJ87KKiSCx4YvQ7QpYALVR8xv","tlshash":"3d63f7cef2d5737559e6a1f20047510aa37e6519dc48289ebd12f6f01eb0e87823bf64","size":68824,"data":"","first_seen":"2026-04-30T10:31:50.315897Z","last_seen":"2026-04-30T10:31:50.315897Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d4b50e64cc3278fd8fe374ff1d2a0800","sha1":"5fa1ed4e1786d43ec3859f04db9a61d8be20b903","sha256":"1b7bb738341e25ccbbdc67e1568032700a7b68f2b23964ce242c7d305d86b3a2","sha512":"a2d764b00a70b5bee88b4c1af935feac3dd695a6c73e647ba057ca0bfe58238ab1008a298baae4ef5c049bac35f167a4a88bedae32a746645caf0878c0c724d8","ssdeep":"","tlshash":"b79022a23c28ba00002c3000808f02302a030083c0808080c820c82b3c3000088c8080","size":56,"data":"","first_seen":"2026-04-30T10:31:50.319279Z","last_seen":"2026-04-30T10:31:50.319279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73cffa172df581e1417b3380bf189952","sha1":"c14dc8dfcedda14dfb6202ae9e0141422ea39bd4","sha256":"789cebe4be3c4e1098f04b45f09e113fbb80d7dea01b9c8a5b1b9a0a1af14b44","sha512":"294775493517fff0e586d24ae8bd482c679ff15b8a40519285040ca4eef3f508b967d5b84b2c41021e731da5c08c83093bf171b0abd7d9b7de88a32ad9f5e97e","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodP5rUzpI4Oz:XYBctCo254Oz","tlshash":"e234198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","size":230964,"data":"","first_seen":"2025-04-07T11:07:41.7631Z","last_seen":"2026-04-30T14:40:38.639832Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"43be7d282d770bce277feb010355ac8d","sha1":"c0558bdd74ce17082d2e00b9416ee76d9fd4b688","sha256":"d5c340d6d8a2bb320e7f71394c0f93aee05e2346b385c6eb372ecf8970a3eedd","sha512":"a3edb371289afcd0935788555863cb449c888152e27e2a6c73f28da06ab342c257952491b0ecca531cdeecd7137465b414f3a65de0030409843f110dd6b1779c","ssdeep":"","tlshash":"4d9022a230c20000038202b0200b0c80802808202008cc000000c0822ca80230200a2e","size":53,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.759268Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"b37fb993934fb9957c6e3dae92c177c5","sha1":"11a50edc8e83dab4cc52476922e91b5d54dca8d4","sha256":"d9fff616c1f8d375a5f9b94dccdde265fbf1311eaec553b6e9eafef13292a20d","sha512":"659b7c9c9ea737fd1c84309275c711c500ffbf9b4fb76d13ea774a997a509308925cb487db25f00e2978bdbb82ac9cfb37eb8b14ff16747e02959801f3588e98","ssdeep":"","tlshash":"43a022f038c220008aaf20200ce30cc0c03c8022000088ef3b00c0ba2c2c83a00aee3c","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.659243Z","times_seen":947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aef931b6e94fee2603b4c2e1e2490d0d","sha1":"3668df9bc0073c49718ef245990aba74b68757f2","sha256":"c718cb756313654b3d4d8141a5844fafbce4b1393df68fa8cc5081e55a1941d1","sha512":"2d360269a5a6bf26bf9aab6e56650f6d9b09f03d703a985b321e835452cf312b14ed12d4212dd5132931e6509591ac0038aeefdddd16ca92aba59f1179c18772","ssdeep":"","tlshash":"c7100000000000000000000000000000c0000c00000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:42:47Z","last_seen":"2026-04-30T14:58:42.071621Z","times_seen":1962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f375acc04a0ac0794d09a00ba6ad8b80","sha1":"1edd7f9c43ae9b84e1945ef577a7b996b2bcc87f","sha256":"f1350153664c01b3e3c37a8232dedefbb5624df7627975b51eec0bd523d50145","sha512":"2ebcd8e7719fd32aa6816608857249845c0e21f77c8e4f0df43876f62a08029c693d5451b51bed1196fdc8b25ed4f4585c127e5a7654b815c97b214e21ab8055","ssdeep":"","tlshash":"b97000082c08220c20a33022c82b2008803320000002a0000a0080a20cb008ae302808","size":22,"data":"","first_seen":"2026-04-30T07:01:35.907618Z","last_seen":"2026-04-30T14:33:24.21897Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.dC6psI5ph6o.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywHg-6Xc7_tFzA_Yy_Mdz98k7ILBmA/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"034437d50a706029b9bbff7dade3c32b","sha1":"016eef3ecb71672a2d643dd46aa5a55256865cbc","sha256":"5168fc15d90ed495250bf937a40c8109dba945a923f6788e3c4b221ffcaa5ec0","sha512":"79553b3213e0968f426d8ea33f9ff51e7d91293c4a34626cfa037fbf0ea6d1bfb51cb27f0ba8e7a1787b027001a45103b72e2d710b750caf6fec949f78c8d4e1","ssdeep":"","tlshash":"f0110270727332c30056a4d515ea850aecfb3386ba9065b7b7b568816de04091977335","size":1000,"data":"","first_seen":"2026-04-24T22:03:54.281341Z","last_seen":"2026-04-30T14:50:43.028276Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"d55fc08ca9c174cac15eb7ecf84faf1d","sha1":"0dffe543ef9a50936679ad13145e24e0ac48c28b","sha256":"6efcfc2434fa7f1ce4d66b82f44e66636b0823af5f8291f4bc25598a1882b7a6","sha512":"e4d1f5d1206c6271e2a0b2c3a6a284d11437b08b64ccf4a0b058819ebbed544dfca8b03898bd9a3e674c3bf699c710e966a66d751a7c0e730c0c219861afa6d1","ssdeep":"","tlshash":"be9002a922c65410475325e428ab5885d12444b01454d9c5544095e29d651275116a6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.663918Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"08bf9651766fb1b93545fff72ac640fa","sha1":"73ae2b48783446ccdda782d1309a12b40056e93a","sha256":"81428afc17e559d1570961b0de5cf5671af284aeff472dac0ac6e4bd3713c854","sha512":"47b68b230228247b327ce5bfb56a902b5f8f5906f3d1d74cd0d84fd6b85b485daf21b775059a2cf9abb452a2e1342aacc3271abf74aa4bed3f9551bd09b831db","ssdeep":"","tlshash":"4ee0c0e8e03450b021544ef2c7c32888a10914f0668e9d7e573344c515b19bb23e7782","size":344,"data":"","first_seen":"2026-04-30T07:01:35.868504Z","last_seen":"2026-04-30T14:33:24.232966Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fe3a96100df8961b22b676ab167b27c6","sha1":"343d08574ced086435583bac66771152a72d32c0","sha256":"eb9142b1177bf1ecce9f95fd55814469595fe84ab2c5ce9a43f990257c303615","sha512":"518e066011823bd90b75a60d0c28778f660e82f67e631a131d8800e840b17d4948e25773e04e7a3067088bedcf82421bbd55a3ca94a75d91c16c1f457b625e40","ssdeep":"","tlshash":"2dd0975030bfa09cca1e2c0a2c8b0544a8a410117474480fc82f6c68c07182df3fac4b","size":238,"data":"","first_seen":"2026-04-30T07:01:35.922771Z","last_seen":"2026-04-30T14:36:51.929817Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1777297771","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"46d8d0628da3d93efb862e1649dcbbca","sha1":"3868ea2a5276e00da6f936ac6b750a26ae943ddd","sha256":"ac2c3c4f6eaff634af74eedd79722cd1119982b6d2addd0e5d5e94780e106636","sha512":"ac627b901df6259bacc72cbfcfa6b758c4eca61e6e72d0101316f5638522685e63c9da3468cc5800fb068a9bf9019611d00c3b63fe5d407228ef3b51779d5770","ssdeep":"24576:PIuR2z48eK9n++ePuZlhExSZCPXdPRmT3r7O1kxSngPgYlVqnH7XhtHgC8IY:PIuR2c8eK9n++eZSZCPXdPRmT3r7O1er","tlshash":"ae756bc5b1c5f46103d355e6a03b2005b33a2859340da068bbbcdcdbe96a98e6377f79","size":1550289,"data":"","first_seen":"2026-04-27T13:22:49.479459Z","last_seen":"2026-04-30T15:09:11.972996Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf688e4f41e436dc5afd5d3e9c7e5d69","sha1":"fe027179594c847f8da908fb0fc6d7cd321212fc","sha256":"a283e24e6187dbb5a4d27b66a9af47b4560072a29780bc6bad09bc9c04fdc37f","sha512":"ec6d82d1b9ef75ecb201a8953256e11e5edf54aba8df8994b885b0f0e14f0be9cdad36d899e6db87385d11bd9421bd79fb415c8d9ca637953c85827b7a3637c5","ssdeep":"","tlshash":"cfe0221339a21182b4bf20149fab238005930217c0d7ca033c2f69902f132b37883aaa","size":425,"data":"","first_seen":"2025-03-18T04:27:57.573202Z","last_seen":"2026-04-30T14:40:38.65057Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"7e3d013340acc0540fc46cc272494c5c","sha1":"71c759a7f4f23a21bcc55f281898509f1831f569","sha256":"b81c500f2f018a205dd441034f08f9545a03bb7024497d45379b358565096694","sha512":"b77feb3d325fb103043acb0cb6f8275a8506a951fd8cc6e47a94016ede67b22895efbaa1d439941b81d537fc241574aa8fcd6f1c309f530d2deee34afb0a132e","ssdeep":"","tlshash":"139002a922c65510475215a415572c84903848602448be465440d5a25c7902291269ac","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.677603Z","times_seen":957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-04-30T14:36:51.90225Z","times_seen":250858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"886b619e477428dd2c91b98c04bf0c89","sha1":"b1c8ccc9471f1649004a9e9f51d690c69764831f","sha256":"12af0796c08006d46dec3a13fddec351ccd553692328dc6a37895a3aa2dfbf57","sha512":"5f7f4d1c19f85bc44c80677f32501857350c007f0f327b3247bd5fddb79b392af2a893f5584be3642a62d508c195f67947b04feeabf607ccb700244e77ee3ddd","ssdeep":"","tlshash":"78c02bc1b46f1024a380a23f02364114f54c0c8cc10144a0c04de0cb24237054735b10","size":130,"data":"","first_seen":"2026-04-30T07:01:35.891221Z","last_seen":"2026-04-30T14:33:24.187028Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"83878c91171338902e0fe0fb97a8c47a","sha1":"516b9783fca517eecbd1d064da2d165310b19759","sha256":"148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940","sha512":"929872838cb9cfe6578e11f0a323438aee5ae7f61d41412d62db72b25dac52019de2d6a355eb2d033336fb70e73f0ec0afeca3ef36dd8a90d83f998fee23b78d","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000c00","size":1,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-04-30T14:42:58.763044Z","times_seen":63559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"67877735bdc38b88dfd84734a4c22f24","sha1":"149d2f0beee40c92acfdce6adca48596c1a5a886","sha256":"1f7eb01c41468f5b62bcab6dcea3cf8b625ddbe8cb8c575f3cd4ada6e04650c9","sha512":"13398f63a4c33681a448cfbbc25986c9e3dc969b61eb430994eebc6dac471f9b716c6d8d9c2eac84c30b14fc1e8924d091cf5fdecfca60da0fc22e972fa9330f","ssdeep":"","tlshash":"78d0a7b1546ca07d99ff91e99aebd9ea2d417119330a1f586330b08622f3018e3d6687","size":249,"data":"","first_seen":"2026-04-30T07:01:35.939439Z","last_seen":"2026-04-30T14:33:24.222716Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"f3df91b988608a9a30a53243147a5e01","sha1":"eac829e03cb5b4f1af7e42e2bf4dad341b53a5fd","sha256":"7c8765164f3c236a04f052fc41511cf443aaf7e8cbe21b9eb9bc9832e8a66093","sha512":"ffb937adfd512344bb1e89278d681fefcbbb935c9367460ca2d1cc91d0bc48f530f9c953ffee1b5ead7363e504e5e12b72e506dc483ba39b674e47c924fd0a22","ssdeep":"","tlshash":"53a002f922c65510575212b815572884942444611444a9855540e9b25c7a23797269ec","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.641801Z","times_seen":974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"65631a9ba80188171463fbb2a63400be","sha1":"af5cd08559b9b4a3b8c51319acd3bc48239eb273","sha256":"1bfb0a3830699fe5c06e95a2dc3a25fd60757cb133a30ea16294200bf7a14e18","sha512":"9993781668be23a1d064d3879ab0eda2173c60b7dd379484b3bac751c46a3d319c4da438a51693004cf0fafd9fdcde753c5942a8efa9f2dcf0a74c27bfa03685","ssdeep":"","tlshash":"5f9002b572c66401875211a5549b5894a0688460184899457544a6935c7542a652596c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.686947Z","times_seen":861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d0c2225b640deec861a1208f37a77c25","sha1":"316d9aadffdc88688239af8b11b6d6028cd665e3","sha256":"05bb5f0450bd7ae843ecf0b0a59698fd93d83a3930686eb7cfcf33fbb26edde4","sha512":"d2f8cfa0146bb5ad59b82be351ea92e1622a2aa0c09932a328731c1f6a4784c7c698da84a2826696092b239244e19f18dbcb0448c8bd65dc84a0f7d55b824892","ssdeep":"","tlshash":"c71000000c000000000000000000000000000000000000000000000000000000000030","size":2,"data":"","first_seen":"2023-03-08T03:30:46Z","last_seen":"2026-04-30T14:33:24.217446Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/vIM7uNEL8MT8E4ZKZObMQGPw_iVvDoGVAoiHrGqTTLI.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2945340bcbb5e00ccb209b32471a993a","sha1":"87e2ab4561dd8f3778a5e204471d4733a5adf72c","sha256":"bc833bb8d10bf0c4fc13864a64e6cc4063f0fe256f0e8195028887ac6a934cb2","sha512":"68d1bbc7182dbca655b8de145188ac5945a90de2ffa4cec85acffdff0939cfbbb90a89291dfad6b94eeabd43b7c8c22c000a818ea2efa925aac48268a2370b10","ssdeep":"1536:jMOeI33FoJ8zKKiSCx4YvQ7QpYALVP8x3:xz3VoJ3CY3py","tlshash":"405319ceb2d573755ae6a1f20047510aa37e65195c88289fbd12f6f01eb0e87823bf74","size":62587,"data":"","first_seen":"2026-04-30T07:01:35.766947Z","last_seen":"2026-04-30T14:36:51.842026Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-04-30T14:40:08.349545Z","times_seen":45187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"40286c984e0fd59b419d75a87cada0fa","sha1":"8fb875515a6a96844db2e2e38c8cbc07d4c78222","sha256":"b1bef410e7f1ef8c4c51b858b25226aba05c2b97a53e29cdc7242c1b65cb4812","sha512":"1db2d7344d641dfef37716fde725ece2a4450140c45cb1514549328e0b040e0656d0c6f51edb84d09d02b2c580a8e681c1a5f050ffe8735a826d94a04494019a","ssdeep":"","tlshash":"5ba022ee22c22c20030220a0008b2880a82800300c08a8202080c8a2cc3e03280228fc","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.78283Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"1868b2f1db098176aae5e36140349440","sha1":"a8b49516820776fa3a0a3705e299701d763de072","sha256":"f0bd2c3091ac499408704c9d3f602bdce3e5630254bb192448d64c6387a77d0c","sha512":"b97908bd121bbc229ac355bc56f4659e4f01331944a6512189341a15571ee345eed4e34f4882859d40e4328da79c1f1ff1abf236ce49517df3a7da4e9b957230","ssdeep":"","tlshash":"8a9022a028c2000003c300a030830880803002300080ac80020082a20cb00220300b2e","size":55,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T10:36:19.082617Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"528953727ef3a4e1c441c6078534c39b","sha1":"07a5d2c54ca81141164e3d9d9f0bd01ef61fa192","sha256":"2f5da6e9921baa794759ee9f4b362555bcb3c1646eb51f671253b5d7d710b75e","sha512":"90e1b5edc5c30efde3cf50ba19bac711e8577a03de6f40d1aba647913ce303a3a4f048bad2d5ce7bfd4496089fd0a44e02ec2e7973dab8aa2d00b75b9e96271d","ssdeep":"","tlshash":"c710000000000003000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T07:48:22Z","last_seen":"2026-04-30T14:33:24.214442Z","times_seen":1347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"eb5ccda1da004baba6010a60fcb07d5a","sha1":"e60fae0fa36a77ee12904d7126be8274996c16dd","sha256":"2b83b730137d27e96d077a9b8d2e7e5e92380dd5d570f5d992edf7e50628ee37","sha512":"39a12100d2c8f09118694c649c1781bd913e8a54bd1539a18e05db1583582cee63989ce9c74cc2c50cd103c371f24fbf23aa7db5d5e47b31c00a4d7b66b4d6c2","ssdeep":"","tlshash":"9ea002e621cb5500879312a514675c88903444b11485d985585899e69d690225317aac","size":59,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T10:35:34.698462Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aaa35a3146850b0de3a068f8acf08709","sha1":"e408640215827156fb120e0a8a1a56c13393d744","sha256":"b7fdc4b4bba32adef4b07d17e4747083d7b20f4b06dac4262ad6ebbbf37c8a22","sha512":"e19a6474f2bb421ca4245d75819cf5e975b1a4965ecc0343033235256ba9b22a764b579904e4726b1036a2296f1c963f1fc7a6ded7bbc5e8fc7b722c8673e8b7","ssdeep":"","tlshash":"c71000000000000030000000000000000000000000000000030000000000000c000000","size":2,"data":"","first_seen":"2023-03-07T12:23:58Z","last_seen":"2026-04-30T15:04:35.185701Z","times_seen":2364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"80cbca5d7f86a5a024943dc5a08bef9f","sha1":"01f20f3873079d5997fa086b64152225cb9dc45f","sha256":"7bf6523bf719ca16e9e83821d0f354775d30927a8109f563b1286ddb3255a491","sha512":"5c6b978fded755df1023b9afbe73f5cc4e0a5a581ce3de3e13f274c036669008228fb87d9e7a43d3da366a5b248c7c9fbbc3498ae3347a898019c60c745451cb","ssdeep":"","tlshash":"f2a022f020c38000038323be23230c80c0b80822080ca8000c8880a3afa30330233fec","size":69,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.770573Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"800618943025315f869e4e1f09471012","sha1":"e69f20e9f683920d3fb4329abd951e878b1f9372","sha256":"f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9","sha512":"d21ec9146c3c327211b8b7fd44003916b938d751d458fece25ef51fa9c8896c97ceb22d032e6dc7388c6143a3b3157764949a7b2cbb062e005dd5f009310ab00","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000300000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-04-30T14:42:15.650307Z","times_seen":42082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec60f334f1f4e6b812f5f11478195287","sha1":"301c0ba447218ae97253e0dfda680478b363c59f","sha256":"751ec3d87173b82642d481f7f29fb45250d450d65d199f1bc9d9c2d684dcb6ea","sha512":"c9602539e09d0aa162de07c29464961a7040e8359c4605f3ef542a939e7b341885a01f7cb496e426683d5a2476ada3a99c38c8a75f7a1dc3dbb5f07ff735def8","ssdeep":"","tlshash":"c71000000c00000000000000000000000000000000000000000000030000000000003c","size":2,"data":"","first_seen":"2023-03-07T16:58:30Z","last_seen":"2026-04-30T14:33:24.197462Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"846ab4709f9337ff2b36bd24d7cd974e","sha1":"13db26e3e902e5fa7d5757a72c3a2cc887ec4aa6","sha256":"5d59a43569c5dd4a08a9aab5713449c99dce771632fcc7cde6190b6b88b31844","sha512":"c0fb6d145e403c5417ad25e9741be5ab1df45fb6c1fa950a152caf47debd3cd3024ad0f54fe5dda4e27a13ae2c5926f09c39b9e9866b6d26e271ff805d641a73","ssdeep":"","tlshash":"3ba022f832c2000082cf00280ca32888c82e08300003a8e80800c0a08e3c830803ecac","size":68,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.747639Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4484ffc789d88ca2c9dad3c923b2ef4","sha1":"ab6e9bcf45fe415da33202ba4faaa9b07a1a84fe","sha256":"2718b5730b2bcbf613b566e0fbf969e1cae215eb6a4fb76c04536b02395184d7","sha512":"1e9f8e3700d47d29ea14f6f4598a0dd295ee497b4d749038dc02a4f2813efa6e2df743de79a9623577480b1ac9cb1b436a3c46890e0fa6754b8ef8d5b455249a","ssdeep":"","tlshash":"cde01a0ad5aa5cc35133381d420f9421246236a7d4c6d908be0fe2f44fb40588a43a48","size":378,"data":"","first_seen":"2025-03-18T04:27:57.575526Z","last_seen":"2026-04-30T14:40:38.697558Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d9c307cb7f3c4a32822a51922d1ceaa","sha1":"b51a60734da64be0e618bacbea2865a8a7dcd669","sha256":"8ce86a6ae65d3692e7305e2c58ac62eebd97d3d943e093f577da25c36988246b","sha512":"6b3b006aa3a86286c359a6d243d62a61e46f0c5f7d1db587faa26fbe72718eaee33f774af164e3ba790d4ae4136a25dc993d3246f7be6691fa7346d0be0f1a71","ssdeep":"","tlshash":"c700000000000000c000c0300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-30T14:40:08.385866Z","times_seen":53635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-30T14:40:08.399544Z","times_seen":54763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f7e48fc658e89a0a3db6563a8bc8bbb9","sha1":"ea35a7d6647996e3f6b29442851291ba5131091e","sha256":"911ef6d530a1739024d0df1f9f323ecccedb0ec6de2ac45fd457bca22256b207","sha512":"c9e75b399555fdcde2325fec996ff88e61c809a59bd6915bcb32e16d69fce760f5f8779fe38f0d08db5e35351cc7a4994b8f778f5f000c789ffee5c048f50a7b","ssdeep":"","tlshash":"0ec08c163624256024d00430ebf7981d805d50335284394c501afa8009d3e6c3826082","size":145,"data":"","first_seen":"2026-04-30T07:01:35.911558Z","last_seen":"2026-04-30T14:33:24.192512Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"654c80a60ecaa2c0226420c12f00b87b","sha1":"bf9214d6171b74d235230362d1e6c840bbfa6fb6","sha256":"b9a3cd142c89ccaab690683d88362116a8588fc038c07d1bc80c85ecdcb2baa4","sha512":"1819e5f01e2b2c585fc49cdae6c6dbd721fef0aea6834ef9a776c5d16fa160ea5af63bb5b365c65f286498f6bd4484be0846824254ccafc233b16e7c7866228a","ssdeep":"","tlshash":"94f0e1489f9eb730c5b5000c493be1a431ed01ad1509cc42cc94cc1c00f0ece0a0f948","size":580,"data":"","first_seen":"2025-03-18T04:27:57.612482Z","last_seen":"2026-04-30T14:40:38.748626Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"ea6a1f06d37b571be2dba047b623c32d","sha1":"9861c5681993eac33c7f7b896c446c24245e9e48","sha256":"ef38eb642e69e83db9c4f028f43774b4e088d941e379bda6183914cbc85c451b","sha512":"719d819f87d605ce4134a91eaa2aff5d94286acca7d369b7cf86639e2b76c105f8cd5a2856d8a8e5ba4cdaf61bbff39db177000e4e18ba0482fc850cd6f75b9b","ssdeep":"","tlshash":"89a002b4b5c3504082df21643ca719c5956d44605014ade95814d4955d7d835521dc6c","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.670101Z","times_seen":1040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"d541184c411d2e0ff266f06e5c983a29","sha1":"ac1d9fe0ae9c0a031a63b30825249f03bb6aac89","sha256":"f42dcf5b668f506b276e257a406d7ce854a47c9d672138b93764ba07801aecb1","sha512":"17b06446eb79fb694812b37fa5a1cfae3d4858f9fb762db01143fbd49964cdd775698b6ea44af15d84615945f3a25e10ce22b124b8447a2f99bd4272d462864b","ssdeep":"","tlshash":"bf9002a561c6541047d221a424571985902444605444ad455440d5925d750625615a6c","size":49,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.739586Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"852dd9819ff83180fd00156f44e3d25f","sha1":"45f0d48ff5d438e80d16338b1662ac34cc2eff30","sha256":"cb3f4f8ff27e091ad6844da23b1f031f64ef3371701d5562ddeb9616268123d2","sha512":"2137685bdaa751f589d9e7ee303227ef6070fbc9af2b78ec54466fb240e1f9efc2520934e87c3a10071d4e76ef9d32c306e0e07b9ff7e314331d740068217f9f","ssdeep":"","tlshash":"0fa002b876c35510829f11641da72884957d44605114aaf95814d4a55d7dc35812ecac","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.742029Z","times_seen":950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"6f9984a7e2f2e03dc65bafd5fd5648e6","sha1":"f059d8fb0badf0996ce805421eff7c2ae23535ad","sha256":"f67c8d014ac734ab0d5d1961dd3d09b66063a1678e1a1a735c73ab2bba06631f","sha512":"06ba88cdca54d0dedb6db7879236bfcc2f8fc2f9442f72ce76991f9d466e2bb5881433c8d7b51b492f5354b1d77cb9b77001da8252aa17e38da63aea5a3b6db7","ssdeep":"","tlshash":"c89002ed22ca5400475726b415971d84906444601445e985645096d35d658225126a6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.667243Z","times_seen":941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5511d68922b66571e4b77daea3403955","sha1":"e305404298022059651927280abbf415aac4e0f4","sha256":"a321d2c072f90ea1c637717ef326cc7516910e7cfb95691c480541fabc3d496b","sha512":"73ac192d08952b1f645108ffb22329ccc579cb9e2d7b6d5302bab2eebedb6f00446e2e78c06756cb3895bfcdde419f226f14d77848a76f3944884f375b2cae0b","ssdeep":"","tlshash":"d2a011200820308c2832a8a8088b0080a028828ea080a8038a28ca0283ec202c20288b","size":78,"data":"","first_seen":"2026-04-30T07:01:35.82816Z","last_seen":"2026-04-30T14:33:24.213913Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T14:36:51.905877Z","times_seen":217929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T14:36:51.912467Z","times_seen":204852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e6f5482d6da140c626315d6aaea387d4","sha1":"e1bc600ae21ea774635d77e67c5ccb707f13b4b5","sha256":"b5f4324cc1c3c1c05c877bac300c37612d9c496fb9be1437f2e9bbbef097ce40","sha512":"c3c30cb7b467f53c78829493d0b6a142142ee4e91f4e44a3b67867713bcca4efe01c929af68dc171c129bf4cf5af9a7b1736f2c548dc98f760194cf10a056912","ssdeep":"","tlshash":"c71000000000000000000000c0000000000000c0000000000003000000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:35:58Z","last_seen":"2026-04-30T14:33:24.186508Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/slick/slick.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","size":87157,"data":"","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-04-30T14:40:38.620398Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"40af5dd5ec3f3c92c469876ecc3eaef3","sha1":"84b3b9023fc664c0df0936d0cbbbfd7e9e998ad5","sha256":"b97a305725fb3c2a78921d7490c99430a1aa8ec0651a4725ede41f8f7d86ce55","sha512":"c95ac2b2418d94eff4a44dbe8768c9a19f6b74309ff285a9f73426456a1c62f91007957d355dc5bbdad396efd4038a96488359e5b72beaed37a86b613f7ff2be","ssdeep":"","tlshash":"4ba002b4b5c26040829f51b45cb75884b56e4d611024d9ea6914e4955d7d835815dc6c","size":62,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.809047Z","times_seen":977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"0127b7d2a451660bbac7db22a58f150f","sha1":"d39a580d402f4519f72215251ebe5cadae4c6400","sha256":"e8440c91af0d97cbc7e78d0be454f9af13ba485aab1915302c1ec572539c4a90","sha512":"ec989a2b1fe0b07a98c1375e84f80b056163c970a91fab1e7ba47f43503a6eb1904a93d54a2056ebfc16914d40f2ea225f598e02c8a166ce951c008ece9fb968","ssdeep":"","tlshash":"0aa002b575d2510092df11b52da71884a56d44601414d9ee6814d4955d6dc35823dc6c","size":62,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.678307Z","times_seen":923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f8f57715090da2632453988d9a1501b","sha1":"6b0d31c0d563223024da45691584643ac78c96e8","sha256":"62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a","sha512":"f14aae6a0e050b74e4b7b9a5b2ef1a60ceccbbca39b132ae3e8bf88d3a946c6d8687f3266fd2b626419d8b67dcf1d8d7c0fe72d4919d9bd05efbd37070cfb41a","ssdeep":"","tlshash":"c700000000000000c00000300000000000003000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:09:42Z","last_seen":"2026-04-30T14:47:54.831138Z","times_seen":50071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f889c2c94a5f1a27ee9231aa5cc8feb1","sha1":"133c47ff486f5021b98a9c887de707ee09f91a2a","sha256":"63c2d4e3f0baf5c3badad3f869a7f2b4a70e72d3e65cbb488cee48905363faa1","sha512":"a8b917e48128022a712e86d8d0163e3e50c2810e678d435ba900114a25d68bc40c658cf80f64221cadfe42de44b0668f6296fcb819981c88bfae71c27f47f0fe","ssdeep":"","tlshash":"598000082cc8e00000222ab0200ba88c082320a83aa00e28a0ab0cc30e32b8a3302c3e","size":34,"data":"","first_seen":"2026-04-30T07:01:35.85396Z","last_seen":"2026-04-30T14:33:24.202029Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-04-30T14:36:51.889938Z","times_seen":163756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"4b232bfc6555aa0968f0b03a1147db77","sha1":"265169aa7bbc8e04149911aa7748305b92b3c749","sha256":"43cca2b68bcb03104c9dcfc3da786d94b9b59e61a39564539a124549d0a00c3b","sha512":"d0b991eed7f049083566c71c465706ddbe4ba7b27a0360ccf280f281176510a0eedc491dc4e6793ed5c5603c6ba8424d34748629ee0a2d81e28eb437b0d3503a","ssdeep":"","tlshash":"3ea022b832c2a000c2cf22202cab08c0c02c802820008ceac800c0888cac838300cc2c","size":67,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.655145Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf2bc2545a4a5f5683d9ef3ed0d977e0","sha1":"7323a5431d1c31072983a6a5bf23745b655ddf59","sha256":"de3bbd0fd7945e42581643b18cdf28dd3ed61d9c3d541b7b016081564b65a3f3","sha512":"e4905774bded155bf357b0ee159264e16c0dbbfbd1da05ee218bc4d3a6aab7b05a133650d0d4b295adeb079cf58d7309fc3d5823f0dcf330d5634478f9cb75df","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000000003000000000000000000","size":2,"data":"","first_seen":"2023-03-08T14:22:57Z","last_seen":"2026-04-30T14:33:24.191017Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fcedd8fb551586a663714c38c0dbff5","sha1":"dc999030c025d5a8fba6634f9b95d174cc43ee36","sha256":"b214438d2d9a4d573a888e5e6fa46e81bc245be2bb4d6d486c0b56f3e0d3c2a9","sha512":"85112da70c18d78de5a07889824916365bb76d381d35654d19ba44b4f370d24ebff2852f3c922d2b72d757ac1e225e8811c003174bb24909d710bead63366ade","ssdeep":"","tlshash":"62016549e11eb97480d3d636470f0a36c6293519782c278df50192f99a30a2eec67b68","size":745,"data":"","first_seen":"2026-04-30T07:01:35.892113Z","last_seen":"2026-04-30T14:33:24.194454Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e07866ebf4f25ec09bdc522b4e2bb718","sha1":"77f99884c84c6bda5083ed43f9d7c359c482c101","sha256":"ee0b98dd81a973acb78f44f421f926660b98042d04faecfb395a4c443ff6bab8","sha512":"e0002ce7f616c3041b2ffa7bb801a45c67787ba4bd7a5b59a9ef3f72ae131ce00fccfa04c359eb207a18d0663ee863d43336894198e25cab3a7762f4d45e249a","ssdeep":"","tlshash":"c710000000c3000000000000000000000000000000000000030000000000000c000000","size":2,"data":"","first_seen":"2023-03-09T01:33:23Z","last_seen":"2026-04-30T14:33:00.840002Z","times_seen":2062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"f2f1d783a258a064f7da827d82c5b0a2","sha1":"4acb17f12e77e8d0d2204bcf480f77d4c0cf37bb","sha256":"c8b90c4261834cdbffdeaf4c6bb87df3e76e08d5b4ed5e6a8ea7d6d00af4df92","sha512":"d5ed63e5b76b1e27a58a4faae6038bf11f7753c458482e0c4f35b2e13ac6c7dc48e574ae75e6df73b5694297eb73c964888212e56403aad184f09c5215cbca9c","ssdeep":"","tlshash":"b2a002f876c65000829f26642de71cc499ad48601015e9e96824d9e56e6dc35412ecac","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.792634Z","times_seen":933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"34cf08bd31357ba3d476a0b487f76f1b","sha1":"cae1e0c549b63cd0157e2cca1f4819e4ba01d9c7","sha256":"d3099870f89e70abf6710eb67b2ee3f7378a2c9aab22022cdddb183bfda86e97","sha512":"9277c93e5bfa99ce85543a03c3e2b10a188cb1d6a70c83707f63e10f06a60bc5c50b44cd2c3782b190b9e3949a356e70e292d739f6d54d604e0571c2cb49af3f","ssdeep":"","tlshash":"92a002b575d2500482df11641ca759c5957d44601014d9e99814d4e55e6d835421ec6c","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T10:36:18.97107Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-04-30T14:36:51.908806Z","times_seen":240561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"6f1d8ae58cf1149f75e38e1e35be8e8b","sha1":"17b0b083b783f7029ed4913ed8a8fb6d09946ec2","sha256":"98f7d5ea481e5f06faf8be71cbf2ebfc8d22df6faad66df8ffe22596a44161ed","sha512":"fcaaef0dcb7a5fc169a50f7f9dc6387e1d1d4213242858e4dc2a099e869e3d7cb00f45dcdfb511ba813b910d3d05c4c7f4eca5be79a5a53686e00889b0a645d3","ssdeep":"","tlshash":"249002a923ca5400475726a415571c84a06444b05445da85545196d25d655225126b6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.805329Z","times_seen":944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"6265a7adbd89850d71286f295f25e134","sha1":"1dd92052fa66e72856ff6306d818bded1583ea52","sha256":"01a5284a9deed06fd150c9032fda9002f90f51252ecff0416a56f12f1e3a1338","sha512":"0396a0cc36a1ec548a5e1e6e602eb89c1286cd7d074b6336960f6a26090f048c3ff50641d7f26d62ee1494767922655d910c2c3b0b1a9b754e5089aa4e4546f9","ssdeep":"","tlshash":"faa002b575c29008829f11652cb718889d6d447012179de95814d4959d6d935413dc7c","size":62,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.75314Z","times_seen":843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f09564c9ca56850d4cd6b3319e541aee","sha1":"c3156e00d3c2588c639e0d3cf6821258b05761c7","sha256":"4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260","sha512":"2ddcd5fd66f62c38135603defc728493bc9012c9ea6abc8a9823165792136513b2c53722d2a79c0d6ea31467308bbb49eb217d151d79baf4b2085f487d0abfae","ssdeep":"","tlshash":"c700000000000300c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-04-30T14:49:15.44714Z","times_seen":45885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T14:36:51.912467Z","times_seen":204852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"c716548f4cf58020b7ca072f317809bf","sha1":"c6891eefb270f65c3c832039b78d38ee730ba9c7","sha256":"5f04472b22946425a53b1cef9843e6bff7b3ed4dba183115d0d987dc050d5a7e","sha512":"7cc5312ac8769e218275f152c927773626b157285d8074305581c32a590c79289949ab5cd8adb2477fa4b28d3e9cff31844f1beca40022897b128c69641a76e5","ssdeep":"","tlshash":"2ca012b070c18000424f13292a52084084bc0410101854940c0880555b5a831012ae5c","size":81,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.682253Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e8ff3c7be92806ab17a8ee242229ed27","sha1":"7f731e79cce38807104a4193435632d3090c48cd","sha256":"95f0e3f6fa656454127141c8f55e8d7f710560de8584155f96570281735b6d9f","sha512":"7c4b993c8def538867591fb6b23045a2954fc8383bb29a29a56ea1f467656be57bb87f1dca1cf73c6dd2be014a3694756e0e5086793a86bf36bf46998ba5c963","ssdeep":"","tlshash":"3711905049472776f29418312c5796042421b433ffa9a99a9717f989d7721c3198f94e","size":909,"data":"","first_seen":"2026-04-30T07:01:35.915079Z","last_seen":"2026-04-30T14:33:24.183708Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1eaecd23c1ad3a3e5cb97645e2f33165","sha1":"61baf2941d4efd6787f7ccfb269ad290f6262f47","sha256":"24ad04d28b7955369563d8a469b291df0aa5e6306e335b9e3056281c858ba472","sha512":"e415cd86d4da352393fe9ce5ae1bf761443f375b88bbeb11b92d86059232d91a6c0a09f0efd7c589787dbe4e71aea6eb3d39055a5348a1a6b307c3d597f74df2","ssdeep":"","tlshash":"8501f9479413d17fedbf5124cdade7029b963d211a1e1765f4dd14488ba013b61d88f1","size":659,"data":"","first_seen":"2025-03-18T04:27:57.630136Z","last_seen":"2026-04-30T14:40:38.824158Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"7d99b23e9e9b5600837f0afd9d209cd5","sha1":"9c0d77cf54bd8c58d70acc808323910406b09652","sha256":"9a223e450f5cc6b4437c7de1f29a225a4348995faa541c8607565b02413b9a4e","sha512":"dd2e08f0300f10b4551436c3982a381bcce7d7d320642c368688473981e03580659e29e1f879db3330163e204eecb622aaa0aee044eddef3a578edd849bacfda","ssdeep":"","tlshash":"679002a521c654005b9211a81467188591254865548499496445d5926c7d1229156d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.641279Z","times_seen":1066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"c1421189c529b47d0591f1ac5a31f9c2","sha1":"4df5f4a0ad98e373433dfe66a76e3757d2019266","sha256":"9b3f326aad3107f5b287dfa61a64ee39dbe6c3586b40a01d8733e9e45cab0cf6","sha512":"4139ef4fe0e04864dea508aa90dc310771e782b1cd8a7af25305e0471ebbed2758c233c7696a93af9c06bc0ef853c7f0d30901eb6bfba873568e64f2c2fe1486","ssdeep":"","tlshash":"e6a002bc76c25110829f117c1da72884996d44611414a9ea5914e8e56d7ea36c72ecec","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.648334Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"222b57de868c251432f8cd2a3eb03fc6","sha1":"b1a341c59dc4c60bbe00244ac8bba87528936bc7","sha256":"98723004e3c6fb97d8b02a29e24615ed48f87ca4681f5f9e6c96468db2c95168","sha512":"25dcc11a8797e111eb5679ac95428acf8d949324d69ba9789f9a84873215a8b6b05f78f7d1fc47999ef40bccf42a69047390380717284d685ad6a25c36dcd856","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000000000000300000000000","size":2,"data":"","first_seen":"2023-03-07T23:04:47Z","last_seen":"2026-04-30T14:33:24.215794Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-04-30T14:36:51.887007Z","times_seen":140642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"dcb9a369a33bac02eda756d479dc9900","sha1":"33ce5d30d8db14838c677476ed1153d5e93d3af7","sha256":"2bdfd3d78675666844ea4836d11ef2572ded36d162ef22a05f72ec931ed6778c","sha512":"8bdf76bcf17b4306e5b58de1918540e2f1720d83731621100ba982e59eddca2b5401922ef91c55eb4fa8240e37e6faba461ea7761c6bfe010a5df288e5ed488b","ssdeep":"","tlshash":"a9a022b038c30000828f00a00ce30880e02c00200000cefa0808c0c00c2c830800ec2c","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.798634Z","times_seen":885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","size":1,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:36:51.894505Z","times_seen":418717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"80ca5cd11656be980bce8201993dba7f","sha1":"de50663d81896c0aa91d957737a053ca2b353f6f","sha256":"d48f9d4e53c38dc790f47249b86060ab6b4c6d71fada3a10a0ff40d4e4368592","sha512":"a4ca685143e4cafdcb10b4baea5a96e0527a3bb01d9da55a6955d20c4582c4a74f4769d4b1916a5237622eadec3e6c715d10ef086de2cd059d05a4158f2b1b58","ssdeep":"","tlshash":"2aa022f83bc2800082bf00a02ca33880c0bc80300000b8e80c00c8b00f3e8b0803ecac","size":71,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.774815Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"ddfffae4fe2a16aa35f5293be9cc80c5","sha1":"c9c5a492409ec7ef646567eb68c88a074a83de2c","sha256":"21ddd146ad4a1100a10fca3ffdc3a1a6d1bbc61eba8aa165db8f1c59c697f808","sha512":"59a7258c0385e39824249e07d63934eb2105fceb7f202029a2fa03efa2d18291b9783f2bd017adad9bae934e16286fc40da8c71ecd1ec6ad93c63f1e8d37335f","ssdeep":"","tlshash":"83a022b830c20008b38f00b80cb30880802e08a08000caee8c38f0f02e2c83c822fc2c","size":76,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.771378Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec60f334f1f4e6b812f5f11478195287","sha1":"301c0ba447218ae97253e0dfda680478b363c59f","sha256":"751ec3d87173b82642d481f7f29fb45250d450d65d199f1bc9d9c2d684dcb6ea","sha512":"c9602539e09d0aa162de07c29464961a7040e8359c4605f3ef542a939e7b341885a01f7cb496e426683d5a2476ada3a99c38c8a75f7a1dc3dbb5f07ff735def8","ssdeep":"","tlshash":"c71000000c00000000000000000000000000000000000000000000030000000000003c","size":2,"data":"","first_seen":"2023-03-07T16:58:30Z","last_seen":"2026-04-30T14:33:24.197462Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"81b0ec11899ef07d10ca2d1e0569aade","sha1":"d7d2ed753eb4470e216a96926be855e1dcbd226a","sha256":"dffbe84328587ce186be0985ac2b4bef07d1cb5f9b4c0e2131393f5ceeb31f8b","sha512":"6062af54bc70bf5ef7889dbd914a0fd7bcdccc1fef4b5421d734a04376deb7ff9a16cf7979bb0b1f95ea04634ad7484ad5ff02a68e65b77a27608a0f7c4fb8f7","ssdeep":"","tlshash":"14a002bab5c25100829f11641ca71c88956e44605015a9e96814d5b56d6d935411ec7c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.794309Z","times_seen":784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"09d00148cd6e851f6054a0cca02ae814","sha1":"6a532754ab3a87c8a1ac238a169580b20b6dba44","sha256":"c41de80fd3c7a5ee98db833a483ba162fd6ca74cfbbb57c340f0c062cc749708","sha512":"3fb38b0b78179a5f90d9f2c814c1bd8bbc47bf0b941b609f09d9d1f7728224bd1c1d306e83b45bbe7d3886cb0a0234b28547f99ed116f3860919c3d1c585b00e","ssdeep":"","tlshash":"249002b529c6545447d251a429571c849028486035489d459442d9a25ca51235215a6d","size":54,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.768891Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5576738841ce7adecdf8957f2f2bdff6","sha1":"e32821d038a1081b839341947db73f62da7676ae","sha256":"23a339edd3db33870fddbdd2c6fd89b3879e0db2b30710cd77ecbe326a751742","sha512":"34421bbaf059dd526078f2c9102099a18714c3fdfade8f14df64f4cc7389ffd22886ea127544827ff003063acbb4c394e5484dd24bc6e745920d027837ef3e17","ssdeep":"","tlshash":"a0d023b500f4423c9a097912934d59d5c32d1e85f1416900d45105c04c795575f26835","size":207,"data":"","first_seen":"2026-04-30T07:01:35.927012Z","last_seen":"2026-04-30T14:33:24.193004Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"730403c5473888674762d9ae2a9b708d","sha1":"01e65acd5cdee783c2ef138c13eb2498f6b3f389","sha256":"6ce42a6e1a4f23e8b299ba9ec8cc98db08a809b0506fff8f7c3caeae1606d88f","sha512":"67c8e9ffa7f347fa0516b567ca8c1c04a6a1124e8d0967b3e04d3bff15338ecc0ad95f67709a250cda54e4a8406fddfc3cc37f3ece2f887bb27ea3174a27a7df","ssdeep":"","tlshash":"1a70000c2c08220c20a2302a882b2008802320000002a0000a0080b20cb008ae302828","size":22,"data":"","first_seen":"2026-04-30T07:01:35.896666Z","last_seen":"2026-04-30T14:33:24.230135Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e07866ebf4f25ec09bdc522b4e2bb718","sha1":"77f99884c84c6bda5083ed43f9d7c359c482c101","sha256":"ee0b98dd81a973acb78f44f421f926660b98042d04faecfb395a4c443ff6bab8","sha512":"e0002ce7f616c3041b2ffa7bb801a45c67787ba4bd7a5b59a9ef3f72ae131ce00fccfa04c359eb207a18d0663ee863d43336894198e25cab3a7762f4d45e249a","ssdeep":"","tlshash":"c710000000c3000000000000000000000000000000000000030000000000000c000000","size":2,"data":"","first_seen":"2023-03-09T01:33:23Z","last_seen":"2026-04-30T14:33:00.840002Z","times_seen":2062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"44e00710fd359efa60bebc675b0834de","sha1":"3a8b0c63a88a21ac464a7ed2b263dcb9156fc1b0","sha256":"d7d106ecdf61ff7ad3eecdd86c84ee4fbc2eec3615c52ea48bb4c7aa534a8522","sha512":"40dc685c7ebef603a00008ffe00ca7c513363aad80bee75dd34d3bb13c795a0e9deb96fbbe9a6224ffa8e78e28ff346842a379bdcd71f05960b37cccf1f1e88a","ssdeep":"","tlshash":"4a9022bc20c20002030200b00003088880a0002000c08a00000080830c28022023083c","size":51,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.828422Z","times_seen":515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"8816b30ac0cfa706905b552a7488a1d1","sha1":"82e6028b4b99e9a0e3a393d70173471cc4b02530","sha256":"37efea63959f823eb7a65b730a7d113f2fc0246c5459cb00b1ffb6f0f8df9667","sha512":"ebc0bea7e6a3d6ae5cd959e7261f676e85def1b238d17d1848cee8f979a2e2d5e4d8b783cd853c9be293107decf05932a638f96c9da8054a8def1470cee39c1c","ssdeep":"","tlshash":"13a002b876c2a000c2df11655caf58d495ad8460101899e9b918e5965d6d83d552dc6c","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.76435Z","times_seen":855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"ff727817abdbf227f00af3ed93ec7825","sha1":"999b125a465cd3efb3cb6fc0d6e3a635909b9066","sha256":"8db560cebeb2515ceee73bebe9eafb46aa250578c00857c4dfffaa9ae5e0f7c1","sha512":"581ea68d6c8b383df2a2ff867e5598967fc09a27b7a0e295332b6257e863180da8cd3d513fb58daaf6cd27e41835928564e2167e71493d33d998db28c53bedd3","ssdeep":"","tlshash":"539002aa21d65402575211a415571888a1a4447014c49b85545695926c69166523597c","size":51,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.758346Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0cc175b9c0f1b6a831c399e269772661","sha1":"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8","sha256":"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb","sha512":"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T14:42:15.68046Z","times_seen":67081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"30781f1fc2f9342ceb1ad2f6f35a51db","sha1":"42543a49c4e416a0fb7c5a7626d0d226759c3a22","sha256":"67719f714cfff1bef08a87c4611ffacfb4cd965e0f049d831ae4389b24f83249","sha512":"b6d398e188218d67f3d4939f9e1f6dba57f7e01063c50f585c53ab0bd4f804f1651bf41d32749c2d2dd2b2581b86a0effe5ba7d12fc364a5990908624be5d129","ssdeep":"","tlshash":"c710000000000003000000000000003000000000000000c00000000300000000300000","size":2,"data":"","first_seen":"2023-03-10T16:30:56Z","last_seen":"2026-04-30T14:33:24.219592Z","times_seen":6635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"70570dafe1406b6d25d78f514ff0fec5","sha1":"7dda6355ab53d4e01ce0a47bc009a226486787bb","sha256":"17d9f7731c92da7b86d20ad81210c823ff42ca69ec6f053897d752fc2ed4a91d","sha512":"5685fc476960ee1e6c45a2aa8e1d56e13fe99c25e0df6bea8c9a61fcfb60d39a57b1b9ca6b809fd4b83a6addcdbffebd6a7a1c301259aa9cf187f6b2a317e21d","ssdeep":"","tlshash":"e3c080c572541592c391947b11774154548956546c1488909545f59c65337145935f50","size":160,"data":"","first_seen":"2026-04-30T07:01:35.967888Z","last_seen":"2026-04-30T14:33:24.233467Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ef1cb6e72d149b184cc241037203f60b","sha1":"cacdf0823fa0a658842237b801fd60d5112a61f1","sha256":"5bddbdea794b5ac1ebd76c5987e666ec03cc3f70f07276253550ba7bb8876cc0","sha512":"6aa7238dae3b76f3b26ef053488a47a36d1b91aa3bc5ad9fbfca1137bdfd6f04d9b1324af8d14966d48c449dbcba5f8bfb007a9ed67eb7c1771d955f6e5d3ece","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000c000000000000000000c00000000","size":2,"data":"","first_seen":"2023-03-08T05:16:31Z","last_seen":"2026-04-30T14:36:51.901678Z","times_seen":2532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7220d65820839700b6c9ae74f87b48e0","sha1":"e42ac444dece0e82f6a1cc1bd69ad86320799403","sha256":"cf50252908e527ebc5cacf537c3a4495a0c0ce5e1f0ec383b18290642cc8afaa","sha512":"4534cbb526564464e0d66416fb23d9ebc412c8fc42b330afa3d26937fe99851481d09fafdbebc2709b9b735d7733be38d527a8ddb5ab3915d0d498dd46f76ae9","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000c00000000","size":2,"data":"","first_seen":"2023-03-10T13:43:55Z","last_seen":"2026-04-30T14:50:43.040548Z","times_seen":2247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/bootstrap.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","size":55775,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T15:00:27.647574Z","times_seen":3866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"d8bcf14df70f441f678f9deef2090673","sha1":"4409996af1d40ad8f702d67dda1f4e20ef8e0aba","sha256":"f10a4c7f9d5894a49bee6d9f74138e614ca77df2199c71c5493efd8ae729c772","sha512":"bd1b6fba89e82768b453684cd8befa49a2bd53ef032e610841fcc7cccc6fdaf038519e16822101c1a8134bd3ac4a6ded590b30930f3dc6e8bd4e9d48b451b0ab","ssdeep":"","tlshash":"fba002b475d25010d29f11642da75884966d44601014a9f96818d4e95d6d835417dc6d","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.661164Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"66a3fd552ff168e39d5727f3f5a07f71","sha1":"7c6bd8a34f27442cbd48e7fae0a79a134d3d3ef2","sha256":"4cb2087056cbacec9259a388f12a7e889ccb907e97dd17b53f8facd383187e70","sha512":"ada170799b63ad3b2530e6107270a3cb0501cc0f1fc56d65fbab761623286f7f0d7d0a85512b170aa65af403fea8584fd8e3573871d066e2dab9b2054fb4d416","ssdeep":"","tlshash":"74a002b575c2540c82df23641ca758c4956d4464101499e99c18d4955d6d935411dd6c","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.699192Z","times_seen":820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d941fa6a244ffdcc602d0a714f1a4ac","sha1":"a83237460e6dd105178ca15b36a4e493ef72284f","sha256":"48a084b6b2cc1aa91ca11ed058b08e8017599d6ecb797d6bca23a408ecc78ae2","sha512":"252478295dffb5f3957a6465fea72822277b6a957487cfa4edf87eed508c926f17b02792fe955d445f662235bef7e02eb1455b3b141bd9787d91dea5f83513a0","ssdeep":"","tlshash":"afb012202d04500e279329b0149f41040348208e00e19803ccbec044dd686e1f2391b7","size":94,"data":"","first_seen":"2026-04-30T07:01:35.898459Z","last_seen":"2026-04-30T14:36:51.94606Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"20d929873393115727c4b824aed08ef1","sha1":"008f1cc30b1125484ee15f8e4a33798444683398","sha256":"f0d68ed36335cbe3b3fb0f48d3a75aad1191e6852d7fc28d0d9b12825ca49c43","sha512":"3a107a1860f2e6093a21ebcc999fb94beee3d3b077d8ead80fd417a8ce6e1b6e66b47b4005e1c53b720da9cb0d9ca7fbe0a262534ff039d718c08da88f33f088","ssdeep":"","tlshash":"c3a022b832c20008e28f00b80cb30a80802e00a080008eec8828e0e82c2c83c822ec2c","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.712238Z","times_seen":1086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"b6701e8ade2624ff9e3b19f2995b4c13","sha1":"b2ff6e69ac79cb2b2cea3069c75a4e4a54a2af8c","sha256":"b6594e0be17f8980e5e3e4d2c6a80e450390eb815df9bfe77534728151ebb47e","sha512":"6cf2e3b2b5cdf5f2e437244f15fed2578b3648ad5907983f033368929631dc74c189aeccc6ae8b7f75fbc599e8898f75618e09d246ca5ed5f199442e20964533","ssdeep":"","tlshash":"48a022fc32c22c2083ef20200ceb28c0ec2c00300028a8f8a800c8a8cc3e830802ecfc","size":73,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.736207Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"b4e92699ffaef2b82967e888e80fe0ff","sha1":"2497c684769952f88f0f7680bb7d2947f181c21a","sha256":"108642668da5d427b5b1b04f1241a1953e8013360097fc9d90b6806291f75823","sha512":"688a1aa366bba111e7f0e5163715e7063a530733fa706ede4cb2ee15a3362459fceec44f674b2d1d404aad1106eb2e1376cfa919c9f8984026b8567b971be7e0","ssdeep":"","tlshash":"eba022fc3ec20000828f00202ca32880a0bc80300008f8fa0800c8b00f3e832c02ecac","size":70,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.674957Z","times_seen":980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-30T14:36:51.902975Z","times_seen":197060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/jquery.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-30T14:38:22.572173Z","times_seen":124301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/bootstrap-select.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","size":111455,"data":"","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-04-30T14:40:38.609201Z","times_seen":429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"24d3c0b3d9ae37cee478753d3a8ec384","sha1":"237fd03da6752cc4024ab80963ce25bab3be27a7","sha256":"3f1e0fc26b50554dac1bcb4ad7d600f1f842f6e241a41c85f598fb19553d9a3f","sha512":"29994344bf8c205fac4458f2deeb4f674b58c87d78f1b07f1a3bc2894a9124d2f4b97a1aa46d1cfc70291133434d1958cba03b7444642d31c359129316184e3d","ssdeep":"","tlshash":"2f9022e822c20000038200a800032888c02008200000b8000000c0b28c3c0228022aac","size":56,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.64662Z","times_seen":961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"98f7108ed4390cdde92189a65fa7bf6c","sha1":"444969c706257a2bf8d05d51a832d4cd4276dbe8","sha256":"33abe804f44c979c65364567d56bb59d7ebee0531288998218cea65a893cda96","sha512":"e3a6badd1017cf2af18aa0c8815a7778ce8fdf5e3de314daa598715be8337e444daa5e1ba57c7be747588651e6a8a0e42444208c25dc6a921a73dde3620b4e30","ssdeep":"","tlshash":"c710000000000000000030000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:41:37Z","last_seen":"2026-04-30T14:33:24.211617Z","times_seen":1175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"528953727ef3a4e1c441c6078534c39b","sha1":"07a5d2c54ca81141164e3d9d9f0bd01ef61fa192","sha256":"2f5da6e9921baa794759ee9f4b362555bcb3c1646eb51f671253b5d7d710b75e","sha512":"90e1b5edc5c30efde3cf50ba19bac711e8577a03de6f40d1aba647913ce303a3a4f048bad2d5ce7bfd4496089fd0a44e02ec2e7973dab8aa2d00b75b9e96271d","ssdeep":"","tlshash":"c710000000000003000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T07:48:22Z","last_seen":"2026-04-30T14:33:24.214442Z","times_seen":1347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7405ceb2813b0f90ace74494d21ef4b8","sha1":"c9b2ef049e2a57bda63fd1cc78251ce6a2187e99","sha256":"2fe1d324f7166b7b7983b7d13c8925b9d57cf35df31b0617a23c2a63da6557a7","sha512":"81b89f40345b878efab99d7177fcbb5e5a56d1fd9fbf00dc276488d51edcf69787f174489d902b32b4893aaaccc066c9865ccd9c6fd9960cafe9ed8f2195a0da","ssdeep":"","tlshash":"c71000000000000000000003000000000000000000300c000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-04-30T14:33:24.174923Z","times_seen":2193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c9c12aaf193a50360f2fa30bd285118e","sha1":"86b950160ea9be161a301d4860ab0db23ef5b581","sha256":"8df04ed8f6627553c9e1fc463bbc4f5ee67c89787f47744c4caa02b23f57bfec","sha512":"50045451dbe9caa52101ea30a46cb76336a9e790c792fd9f0a67ae54a1659902afa6dbae5de21683015da0de70798c83b9d511a3cc22f892ecd0849a92d5a6ec","ssdeep":"","tlshash":"cba002d525545c48156918714446569d5256418e145158455d99c040aa5c295d512476","size":71,"data":"","first_seen":"2026-04-30T07:01:35.860897Z","last_seen":"2026-04-30T14:33:24.240505Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"04b3870fa5c2671f19224830e69001fc","sha1":"d87452bfc3c8dc0871f12c5ee9fb229487a9b083","sha256":"d6df249c983e91dd7a1a847d8c8c8265923823dee9dd562c1b8c69e3a9264f16","sha512":"a9399abc73872eef47003f77a96be187fa0f3d9e0b507fafe88e9a91c95b4ff9f4b5707bb0d08bdde9a60ac95fc16fa062168d3ec7227dddcbf05a4664960324","ssdeep":"","tlshash":"8aa002b4b5c26040869f51741cb718c4a56e4d64102499e95914d8a55d7d835815dd6c","size":62,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.738785Z","times_seen":978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9ca98ec6a7e8a77f13f1842cd2ac2b9e","sha1":"83beeae6e7ed0545499a07597717727802291433","sha256":"c5d91451ae81a907e58302e958b004dd6dc16985a57854d46058d109da362d47","sha512":"22d71374c914388f3bd24eec2ebca2f9b6fd14c081db9d18d99cc074645ec3d7460c268d720e3576b264b92d7ed2723c1503f97bd9956a7bb53764f25b8df991","ssdeep":"","tlshash":"868000082c8e230e22a338e2808b220800228c2a008828003b80208cac300ab0302808","size":26,"data":"","first_seen":"2026-04-30T07:01:35.969464Z","last_seen":"2026-04-30T14:36:51.909344Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-04-30T14:36:51.904248Z","times_seen":223158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T14:36:51.943468Z","times_seen":151460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/popper.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","size":20973,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T14:40:38.634058Z","times_seen":7237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"cf8a2ce4d016f00bc6900a65aa8deb6d","sha1":"898a1ddd6d39a16ead9411c59de6d0b62a17515d","sha256":"3d47c9fe004a6fae3557de89db9215cb4e3ecdc3896ebef1a088d54b72ad4dc3","sha512":"6edd2afd3efbc3101837b647e8b682e4801ef82514d546e80576267cba21f937a3727f196bd238e204fe6d28b8d4f69b1665c8027178e167114486f0e2a30008","ssdeep":"","tlshash":"84a002bc76c25010829f25a83cfb5885956d44b01025d9e95814d4d59e6d836411ec6c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.813101Z","times_seen":1026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"207502527ca688cd61f209fe486536ac","sha1":"fdd2f8450630a55b6d51d56699f98f5b284b8f32","sha256":"e8679a4b7675e75a98a865f0169d0bea8913cab3505af9d8ab93d98035e78671","sha512":"419d7d1b438de6d7ecbfe519063619ebcf75641018eabe4177e9856023106bb664ad159a99d1e972b349388785a53d3293e158d8ab8b44f654a0202481f3300c","ssdeep":"","tlshash":"9fa002ea21c6540477d315f814675984902998625444da8a9864b5f26d6902a9227a6c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.795163Z","times_seen":723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"946aea04c4b142a91f899292d41acd55","sha1":"201bc2764fb1014575702c479d8be3ae33ec27a4","sha256":"8367db6ca44ca8f601581743e5374537b3c476c480ee9fbb9191c825f4c0e098","sha512":"543815f7feb50c39c8ebdc9c1a3fb7a01992a502752b55483ba5560a4cd343be329c95c9179f9d7a69b269f972fc30a661c1bf25fd0b4a2a439a6c620ae498a5","ssdeep":"","tlshash":"2b8000082cae230e308338e280ab2a0880228c08000828082b8000882c3208a0322808","size":26,"data":"","first_seen":"2026-04-30T07:01:35.848064Z","last_seen":"2026-04-30T14:36:51.950738Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/AcqusJ1aNJ","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0396887e24f82a5c739687747a2d5d1e","sha1":"e414bf5b0189af9d82589194ceb3912190f5ad4c","sha256":"dadbf61af1aa9ede34b6bd9797f5cc4a7d1e90901cb10fe3b20e1573502a1254","sha512":"a01a07fd246c3060e31ec3363f6f8f43d544c9670f76d43f2d79d14fe03d1be6481ec6f04c4639b4ddab11c9454640251c3797baf3afc2a3c8522e1b555ea672","ssdeep":"384:boU+JvepohmPF0jyrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI//AjX54cr7sXWcPdv","tlshash":"f1823b6e7959b97743b218b9516f6209733549ebd404c920a401e98d7cb8ace813fef8","size":18118,"data":"","first_seen":"2026-04-27T13:30:50.955671Z","last_seen":"2026-04-30T15:09:11.924061Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/jquery.form.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","size":43811,"data":"","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-04-30T14:40:38.611121Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-30T14:36:51.93529Z","times_seen":291012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-04-30T14:36:51.913031Z","times_seen":173165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"014e3250d8c96deb2f12c944c29a01e5","sha1":"3f190d82a56ff52ee0c65bbecaefb73ffb67a0d6","sha256":"5b1451bea3cf24a53eae9c911ac1f22c35f35e00e9a49cd65aa3716372a822d9","sha512":"d8045927335e2d8cfd18cb52452ef4fde96221bdf03805e6f5cb7505b1e44284357e3a9b268bf7789c70affd10b481147e9cb8403af9e0b35141e7c454b79ef5","ssdeep":"768:8nyhGD49xWHwfPDeHHRJAkqOmJ7mq9d8yo4iu8w2kPhZeC4kUA7CAa2dDo8Gj/EB:c0iWOmoyxitwvPhHU+jxdDozAXG2","tlshash":"807375240868a872c8939507ddb5ff3e9cf816790bc8966ebdb7875c01ec6614eaf413","size":77948,"data":"","first_seen":"2026-04-30T10:31:50.51167Z","last_seen":"2026-04-30T10:31:50.51167Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d484b729d282ff8e3445c2834dabf9d9","sha1":"b0c7726265c49b4130fa510fecfd931d180ae8b6","sha256":"b59f561140b59c3813f30f2f981ab55062a5c2bf7aa01b517c5ecc897a839111","sha512":"c374d1ce0cff059cfb915f6b31b625022200c696666145fa1b6d2f083cb5fafd14566afcca0a58030575fcfa49acef401b2fb1d336082379c63cc3f25b35d1d3","ssdeep":"","tlshash":"e6a024041c054540003d54354c1311040117c0571c415041005fc140c7157dcc003017","size":72,"data":"","first_seen":"2026-04-30T07:01:35.854666Z","last_seen":"2026-04-30T14:36:51.953663Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442041,"data":"","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-04-30T10:35:34.62644Z","times_seen":1201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-30T14:36:51.921971Z","times_seen":137928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-30T14:36:51.881755Z","times_seen":139774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"e95011b6691877ba4351cbbbe30854e3","sha1":"aab00b734135458a8a6d1338cd82434ef3ac4e21","sha256":"5fc6eddb606a607734a27e7394d136b0ee28b0b30b72e11273947de31f7118c5","sha512":"5b471a8798c385b39a1c2c00896d5293da959c22eca99e77afe16ea54f525ef6b029d1ad72fec50554c1ede893cb870bb74327e3b46eb2e1f5f15fd90a9a9eab","ssdeep":"","tlshash":"e2a022b030e3200082af02202ca308c0822c003000008ce80800e0800e2cc32020cc2c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.832543Z","times_seen":1082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"604cb0fc9dc1139b56073f2bd9fb6f7e","sha1":"1e6d0f1d8a4fbcab9725ad6fee442f17b37ac35a","sha256":"eff291fb529c3182420e497e542dfdae534913a6155fcc5fd266baf6c50adf26","sha512":"2ac945a1784d189564b16ecd288d65363e1be2837861ca093f28a9f2466ed5f980697d431a685c0e05f35168c34652861709b10867f40d6cdd63ed6d9824e160","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000300000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T05:16:31Z","last_seen":"2026-04-30T14:36:51.932896Z","times_seen":1833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"09b743dc6690dcc13288a5a377167fdb","sha1":"30a3755f061b33f1f9d7357f63925660fd078ce0","sha256":"09b8a3a59e60530c364ec297c2371216d2b007229a9a678e12f960a8b6888c98","sha512":"456b133f4150b6ca4b6c82644d01f1b0d86e60fa9b263c00c9a096874657c4328f7dd43970fb526fa80f5857720db5de2574c868d19eef8c9a9ba53873f9db5c","ssdeep":"","tlshash":"989002b521da5421d75211a41d575884902445601444a965944099965c69022523596c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.812485Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"47b8d7f086a27168f6b3107639db1c0d","sha1":"4f28a57d6264098ab81b1b1fbe67898209d6450d","sha256":"0324df6e8a4c02cb8148933b7079f984e8191a486b962b3101141ea1a3f9b745","sha512":"37eb3b0dbe9dcdd1cc18bd149b63e0f6cf19a0227007dbfd75ffecef9f09b446751e3f50a0485ac046f487a176af625b6507e07f300ceb81da16db41ff7f91b5","ssdeep":"","tlshash":"b8a022f032c30000828f00a00ce308c0802c08a020088ee80808c8e00c2c830800ec2c","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.642307Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-30T14:36:51.9564Z","times_seen":136971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6b03ad7a18754a9ab3fa42edf2f0f4","sha1":"c811f84fa6e16962047265d11348837ad666be08","sha256":"f8e4ce547d8d4ad8cf484d64f893c38f8156ee41b560a7e57cdc800e5d464bcc","sha512":"dce12cb13d50532e84e06bc519a39bb3ba31727c9a9d43d543673d4bf80907d2f4abb1a2ed1366d638a12c6523ecf0f8b7404bc853c0ffaa9912e8707dc0b114","ssdeep":"24576:2Gxs0yWm9e9PRLEIYrCd4XSMHgv4lhSDzJNGbck:2Gxs0yV9e9PRLjYrCd4XSMHgv43SDzJi","tlshash":"a1656cd5b2c5f4a507e301e6943b1002a33a1c1a740da468fbbcdcd7a96a58e6337f79","size":1517801,"data":"","first_seen":"2026-04-27T13:22:49.458069Z","last_seen":"2026-04-30T15:09:11.946336Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"c34cfc18ecab1e47bde22bb17e123ba0","sha1":"8cf8745277c573de32a6dbb34b0a15880f2c6d94","sha256":"1a2513f6e14081b9c5438ac95cbb1bf8bbe7d4e43c84e15ac2afaa18dbda868f","sha512":"4bc398694d0640e705bdeb9f06f5e7540e34a0c77518d6ced65eca6fe43404689769a97e66750383873b02989062b1380278337a836fe19d5c334092c89ee35c","ssdeep":"","tlshash":"16a022b03cc3000082cf00202ca308c0802c002020008ce88802c0a00cacc32020cc2c","size":66,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T10:36:19.134126Z","times_seen":535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0f16de4274952a7184e059c5f2d048d6","sha1":"b2068e84f62bb34080c6432c3987d6b73a61a485","sha256":"1b3b5231f7b9d2a292d4e05e12ec1400458632cc712dc72a6530c6639e3c75b5","sha512":"d520e580c5c932c8f118320d13a442a311a2d884ba6ad685b9b8fb4c89f82bc3aac463eabf6436d3ec25d77ecc4887303e4e02a302ce3f3565e4f56178459156","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000003000000000c0000000000030000","size":2,"data":"","first_seen":"2023-03-08T00:56:15Z","last_seen":"2026-04-30T14:33:24.189107Z","times_seen":984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0de3ba01184b62b2d8e5b01ca4842f76","sha1":"dd2d76d959659ab5793eccc79cd2dec6f73433e6","sha256":"bdc33b950db6906c874faf1e5693acd3a5be7c1d5b32acf31c962026f8bad6dc","sha512":"944a8bc67c389c73a3db4b5a2c5ca593eadf35afc250aec42cf3f96c5744c8d70fd98d00e24ec8d5bf098303c5fb833df05742437f64bde0e866a9ab3c3dbf5f","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000030000","size":2,"data":"","first_seen":"2023-03-08T14:47:46Z","last_seen":"2026-04-30T14:33:24.203637Z","times_seen":756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3b6ea81f1643602e8b56d869b6a2a5a7","sha1":"fe1ec781ebd46d01e69b42689abf95983c5b66c7","sha256":"4a7bc5223265ddb4054f6f2ca0656b0a3fd5a671e7b105023f81931a2dab9e41","sha512":"df0d30fa083eeb77c2a061f2f94669f4e0496fa69e855f07db91b5c20fa4c5b0e692aa9b7d7e50d78823f3797d6ba9d1f684b4c9781ad93d9a8c172ebac61bac","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000033000000c0000000000000","size":2,"data":"","first_seen":"2023-03-07T13:20:55Z","last_seen":"2026-04-30T14:33:24.23642Z","times_seen":1229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d3b15d0fc1122829e9ec8120b814b9e3","sha1":"e0235085edf5409580fb7983d1999e8c350d376f","sha256":"c51412e179f541b5b4ad0f65f5815f74d19606d461b5cd0160b0ea13ae1a6743","sha512":"8923b6b550e605154041c19cb166ff14661afc53988582134e7c8dc3423a85084d600e2241a0fb5804b1296dd86dd64524572fd6fe35f0271f9c3187f2937ceb","ssdeep":"","tlshash":"02700028ac082a0022a230228a0b2008802a080000002a00020000802e3083b8302c0c","size":22,"data":"","first_seen":"2026-04-30T07:01:35.931471Z","last_seen":"2026-04-30T14:36:51.904776Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8613f56af8a29d2013a1c392c09649ec","sha1":"78da2c2b2e40cdb3cf87e096a66a4cecc52c606d","sha256":"b1ffcb0d42c417fa1d6eb3a0c462d4fe69332261e4d25bc4d9379d6c581620f4","sha512":"8378913ce6309834f529903d6b2563b92ff22824701f1bd1011bbd33821b8b7a2e4453199fc3745fe492ecdb7ffc8528890b4d1993578e35afebb1241fd82993","ssdeep":"","tlshash":"23a001241955349c2936a9a9489b4184a169858ea094a8038a28da5297ed256d20299b","size":78,"data":"","first_seen":"2026-04-30T07:01:35.850595Z","last_seen":"2026-04-30T14:33:24.19396Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-04-30T14:36:51.886315Z","times_seen":173116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"4a60e3001a666fafa4f35dd077f3a60b","sha1":"5858814301ccab2ddb98e4525190f405dc64db4d","sha256":"abe82312563cfd513f2b04eb5a73320353517044bb069a85f5b41c48772332aa","sha512":"77cc23ca729304f14d6e8862384fc4dad358bd2c71e53b2b7f331fa460544f4f6c3f22ff0fae962cc42c7ae889bb2b7ee3c6a992aee7afcbe70ada52134cd077","ssdeep":"","tlshash":"469002aa21d65500579211b4145b1984902444601844994d644095925c69432e235a6c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.669407Z","times_seen":918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8710030bb04a2a45c5facae55dd9fbcb","sha1":"35a702a0f38200d01f4723d38733cec9bfbde5ee","sha256":"8e199a53f7c01a09fa2e330294563fca55d1cec05b4fb9c608d87b58f4a021ce","sha512":"95fc5e488d4cbb87a26bd04aa2f752a83698cd31096a75f38640622c1d906efbc3c7342a187f9b5480abd815012ae7b25be9c0da6d8a24f093cd8ddc3a7af39b","ssdeep":"","tlshash":"b3e068d011419101d555dfe2f00326b29613ac72e8d95ea3b800f206d8b049792ebb82","size":381,"data":"","first_seen":"2026-04-30T07:01:35.935278Z","last_seen":"2026-04-30T14:33:24.200908Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-04-30T14:36:51.909893Z","times_seen":156519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-04-30T14:36:51.918873Z","times_seen":67152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1eaecd23c1ad3a3e5cb97645e2f33165","sha1":"61baf2941d4efd6787f7ccfb269ad290f6262f47","sha256":"24ad04d28b7955369563d8a469b291df0aa5e6306e335b9e3056281c858ba472","sha512":"e415cd86d4da352393fe9ce5ae1bf761443f375b88bbeb11b92d86059232d91a6c0a09f0efd7c589787dbe4e71aea6eb3d39055a5348a1a6b307c3d597f74df2","ssdeep":"","tlshash":"8501f9479413d17fedbf5124cdade7029b963d211a1e1765f4dd14488ba013b61d88f1","size":659,"data":"","first_seen":"2025-03-18T04:27:57.630136Z","last_seen":"2026-04-30T14:40:38.824158Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"e6ad7632da5f0d7f8c376732d6eed73d","sha1":"ea8d34ece6e6988be7a06194995b7064925cd616","sha256":"ffa06c9efed34a8b52b90d8f07fb27e284604bc742c5d2fa3431b5b7321757d9","sha512":"ff13f6574a72769731cec9c0519e32780e6f27d542ace9695792f19579bae561f6826434ff6a1c84ad4073ae9fdc3697046317a9b40ff251237a54605ef27124","ssdeep":"","tlshash":"4e9002b931cb54114b5251e424571c849068487024489d495544d5925c650225116a7c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.754821Z","times_seen":1021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2db95e8e1a9267b7a1188556b2013b33","sha1":"07c342be6e560e7f43842e2e21b774e61d85f047","sha256":"acac86c0e609ca906f632b0e2dacccb2b77d22b0621f20ebece1a4835b93f6f0","sha512":"f10127742e07a7705735572f823574b89aaf1cbe071935cb9e75e5cfeb817700cb484d1100a10ad5c32b59c3d6565211108aa9ef0611d7ec830c1b66f60e614d","ssdeep":"","tlshash":"c700000003000000c00000300000000000000000000000000000000000000000000300","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-04-30T14:42:15.6475Z","times_seen":45869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa14cf984c5d3b7f2c7b5b1ae8396e34","sha1":"d995aa7d4e5778dc581d1051615602c8cffef4dc","sha256":"9379ffa07c8fad50926437ed4a0cde3f1da2694ac0ce5850b937b64be5532e61","sha512":"0a0066cc0bddb0b9c8a1a49dadc7edfeb5bfc99e59be1abd39a7bbfdf87edf7cb26da47c09c44ed8027c4f9241a151f4b565c1c79688ca9614fa8e6efa36f474","ssdeep":"","tlshash":"afc0234047101742592cc3f1470711fe8420453665130d7ece33d107d53098309f73e1","size":188,"data":"","first_seen":"2026-04-30T07:01:35.902962Z","last_seen":"2026-04-30T14:33:24.234934Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-04-30T14:36:51.956951Z","times_seen":133773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b99cca444042feb75f1f9c42d1f3ef6f","sha1":"474c3a445e2daf828573d315d106858356bbc153","sha256":"ab886d7d1f402a074ec5e65f94db7de94300efc0f7d3382e4a427159e06929d5","sha512":"735f8621a7c45d88b9f9752d1d550cb11c6001d711eff96f6e0371abfb1ad5ab1c91da93281b358819257cd3f27fccae041bc09c818b9cbfe79d3036d57b41d8","ssdeep":"","tlshash":"2ee0c0c10000b501d4559be1e0132ab242125c32fac88e03b600b30dfc74197d3dbf80","size":369,"data":"","first_seen":"2026-04-30T07:01:35.885474Z","last_seen":"2026-04-30T14:33:24.173418Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/slick/slick.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","size":87157,"data":"","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-04-30T14:40:38.620398Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9acdbc05ab7c5f2b2576422f0400963a","sha1":"143be00a352c9dc9fb12da7791c366233b5e95ff","sha256":"6fd2a6981e2ee5ba0aeef97b7bfe07df86aebd3b1f3f49a60331dd23be694de2","sha512":"f65139a3b586546763e8969f12b90495fda9b6b76686ba2a196a78ff8a898a50a2dc2a42d0a934a48c7bf343d420c785c392b62117c2413d9b1c72e72e18f470","ssdeep":"","tlshash":"c710000000000000000000000300000000000000003000000000000000000000030000","size":2,"data":"","first_seen":"2023-03-07T12:23:58Z","last_seen":"2026-04-30T15:01:58.586758Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7405ceb2813b0f90ace74494d21ef4b8","sha1":"c9b2ef049e2a57bda63fd1cc78251ce6a2187e99","sha256":"2fe1d324f7166b7b7983b7d13c8925b9d57cf35df31b0617a23c2a63da6557a7","sha512":"81b89f40345b878efab99d7177fcbb5e5a56d1fd9fbf00dc276488d51edcf69787f174489d902b32b4893aaaccc066c9865ccd9c6fd9960cafe9ed8f2195a0da","ssdeep":"","tlshash":"c71000000000000000000003000000000000000000300c000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-04-30T14:33:24.174923Z","times_seen":2193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"47f6990ad01e0f1480b41aa81e7641fd","sha1":"04561a1eb53deb7c7f8eba3b02640adb2d009ef1","sha256":"f1a0240fab6249e58bf32b9c9839de8bb7a6bebfdb27f2de2b6aaedb9d8e519c","sha512":"46dfb7f9d93de3e87526c235b88a92da8290dbc6c62ad5a6d42351a13ce50065199b30d860ad32bbae1d815ae0899ad8da8fcc9925779c0c77b5915ad0cb5a49","ssdeep":"","tlshash":"d7219c4330a201a8659fa047ffdb7c88b5bd524f4424ea84b35ca9922f93b05834e7f2","size":1339,"data":"","first_seen":"2025-01-22T20:25:05.00511Z","last_seen":"2026-04-30T14:40:38.835416Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"ba29556b026f273d7a70c058aead19d6","sha1":"2612cb57faed7520df879e72f9ff4bef2aab91c9","sha256":"8a03a467bf8684a46c870d4342e1c9d47c27f3675167aecda508485a7bd01808","sha512":"62c3ad010e2ae930ec6e03713fb8c63f084fdbcb153fe0c003d8b817fe4a3bad5a3a95e0e90dd51b392dc81d2442251fdfad02e247712b2dfc9cfbe44287c501","ssdeep":"","tlshash":"7fa002e922c65404a7d311f814671a859029946255449ec99454a5e66c6d0269227a6c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.65453Z","times_seen":1092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=nixotradex.org","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f0fc56f6da88871cdffc20bcea3f589","sha1":"41edfcc91c4359f8e8ed80e81678503c5f596d51","sha256":"da3640b4ef40d871cde840ddb72afccefdb98511bb1cb1ab95d9e575d30237ac","sha512":"e35334dbb914a3cbe0853f127ca7ec474cfa9e34443558b8490509d5ee2a3404f1e9f8d80d83c51409133ccc922885292bd491125c36378b7e4bf690c8587e00","ssdeep":"","tlshash":"7d11cb99ea612ef84f96535af32b63c7213362d4b46504f86484eef0213b858864d7b6","size":1000,"data":"","first_seen":"2025-04-28T01:39:11.956197Z","last_seen":"2026-04-30T10:31:50.571527Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a50a2119853cd4e1172cddc79433514a","sha1":"c9d16622492c4141d51248808ec2c66980d7ab86","sha256":"dbf4e8664363fdba9f5a9e95a10de5681c38a8d666745dec0c382c2a6c913f63","sha512":"f3952c5e669703b68ede6737e8e4ef951a11ceb9edd676b10d61e3592d1e965f2214157bdb40375d1d243150a8d4c9776680fac952e072f6ff46fece7067134e","ssdeep":"","tlshash":"cdd097d331a22912282260330027320e2016043cbe32d91aa36cc40608f220306275c2","size":240,"data":"","first_seen":"2026-04-30T07:01:35.879846Z","last_seen":"2026-04-30T14:33:24.227552Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"601d3a60456c67c202f873986fe96a4d","sha1":"24e2a9cf72538e68f9ee70e69ba260bbb17fb028","sha256":"02b7280cae64aca6acc011dc7ecf048fff672c55d2a9611d06fef3cee78b0ff1","sha512":"22cd30a33a07631c0e07fceae7faf50576e8660c72944cb8bc8539e0ce624317eb07e6eed4dfccce1968fef5c07368c5517479cd217d388de5c4bfdb7d6e129b","ssdeep":"","tlshash":"23a022b0b0c3000082cf02302cab08c0802c00208020ccf80800c0802cacc32020cc2e","size":65,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.829221Z","times_seen":1063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-04-30T14:36:51.920669Z","times_seen":216999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.dC6psI5ph6o.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywHg-6Xc7_tFzA_Yy_Mdz98k7ILBmA/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ede01af637f14de26a7af58d19d5d82","sha1":"e57edbd77251223ac64e42ac8b7b99f9be02bdb7","sha256":"894e2e1e6b5d51f6f710880d1d305defd04394c6619e9b586ddc4b73657bef9e","sha512":"84a4f73fbffe6afdeceee5cf59865bbdeea5e100a9ee3a13c7b819ffc688ec9cb48e37a406ad44fe9fe4397f3d5a7e69d0781da1a2f7093a34e4b75cafaddb5c","ssdeep":"","tlshash":"58119438752882138ae7128a9e2eb15e7017b93d63af1db1b1ccc1c51034c2412e632a","size":1000,"data":"","first_seen":"2026-04-16T18:05:31.942609Z","last_seen":"2026-04-30T14:13:38.416803Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1bd0aeb866d7eff79d28349eaa6d4674","sha1":"fd771c1cd920105fb3b3d115f9522b4f6fdf2b23","sha256":"b48365691e0617516524953f00d9a87b37af8ca0638cc21f5115960e7d594a23","sha512":"84da9d102eeae4f247b9a41d06d7b780b148a2be020c5901a925a9fc714a3a683ccf49b8b110b10f53bd1ab863f8b29125ef898282b1c3c787bbe74712d9d64c","ssdeep":"","tlshash":"4fd09770362d90ca091b3c310882c22488ef404538882d0c041bd1e65068eb1c6c2e82","size":228,"data":"","first_seen":"2026-04-30T07:01:35.836092Z","last_seen":"2026-04-30T14:33:24.206375Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"a7a51ff3fa8a29204c4d6f1686a1c22b","sha1":"d7608a8be17f92d72c171e6f38269dbf8c1e66ba","sha256":"21d2e086a89a2016fb290f67c6a5cb3bb70088e30a74a1f304a4829f52114c22","sha512":"b548be0874214fa3594d056d58da019370c7fc0ed95153006fa09821d75de1d9e5a4f1faaafbd40f5eae936f19b2692259c588d555659f840e0f678600ac701d","ssdeep":"","tlshash":"f49002a9b1c69440475651b4186719c4a0254864145599455540d5925c7d4229155e6c","size":50,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.6632Z","times_seen":978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"83da6876ed63742f3c71c31603753a8e","sha1":"cf23f92d012808e369beae1d300cc2906e5f0e58","sha256":"889ad399a20b3cfdd2274c0b91f88939d5c977ec2dc0564b55667b30d21aff59","sha512":"fb1d938411a676e6b738eaa1f51c8b1579c672498bc6beaae70a21ce062e28fde906df67f4d4fbb588f952721e47f9afb5128fdc0650e5a8eb22f4d48d589f45","ssdeep":"","tlshash":"0f9002a761c65500479221a414572c849025446154449945684096a66c65122515797c","size":48,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.740404Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"906c0bb2e9b51f853d5cdedbb6037638","sha1":"80dcf0212bef8c279550e0bf05adf851ab2f225f","sha256":"e742729f844da1c42da861cdd6fdafe8129fb04ecf5e070e5cb87ace7a525bff","sha512":"8d9d92741d0ef70c3cc9377c87cb2d3e9bcab1491024fb3f2e15ab9dc123157b97e4f61c4e8c10959af07f00b2917e268371f6f1fd0430868de5d05fea9430fb","ssdeep":"","tlshash":"419002a621d75540475213a5246798c49064446014c8dd89544095e26e651226316aac","size":54,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.668683Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-30T14:40:38.608552Z","times_seen":17853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"c46f95bd1ab9bf89746108cdd87d66c9","sha1":"de2affdc75440e298768ba0b2a23778a596bd963","sha256":"2eed8da773f8f48aa85bcce28a3d357486a64abab736fac54a2ac32e1cc710f5","sha512":"0175a732bdb8edb3845dbcdb1a2b4a73adaff993c2071d6e44b1b982e1e96c9dce5aea04e4d720f35e9845fbd2b7fc2730fed447b91bce18b5482e18dfa9fa5e","ssdeep":"","tlshash":"fda002e92ac65650475212a465573885a07484711888e9955840d9b65e7e02691269ac","size":58,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.710485Z","times_seen":980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9fbf2f7cf0813f7453169b7046d94779","sha1":"8f47ba45643f1e84eb974ffe64ebe29f41469549","sha256":"34e6cfa8e250164ee43a8cb89288cf7ea75f3d596857b68c650ba7c5bd341dd5","sha512":"85ec22ea0f7cbfaa30fe8f86b97fafad4edce9455ecf032707366dcdd19852bf778678789d17e48a6439a2aab466061e418753ee8e2c31e074b7cbe9219d485f","ssdeep":"","tlshash":"7aa024013704350c1c75dc11444704007341405f11c4d434403dcd013734c1dcd1103f","size":81,"data":"","first_seen":"2026-04-30T07:01:35.890254Z","last_seen":"2026-04-30T14:33:24.224622Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-04-30T14:36:51.923616Z","times_seen":174085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-04-30T14:36:51.890678Z","times_seen":150984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"e3055a143912b6911fc03c02cf5719d4","sha1":"4b01dd1698e5df4de8e4e5e8764502bf8702602e","sha256":"12ad6157baffaf39a7be4682b0c93f21ed36ec699a1159362d26b4008209b585","sha512":"a557ef75f200b1f154e5e3a1460dba04bfde9527df888cee1e14c38cc4d09d52c81e2179df8c4544b79040baf14329fde76e44c29cf13395264937fb295cb8fc","ssdeep":"","tlshash":"aaa002b875c3540082af11a46cb75c8595ad4c70501999e95814d8959d6dc76451dcac","size":68,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.78365Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"7525d59cb1341118c89b0ceef17986e1","sha1":"0bd69301cd3437ce2448c6412204854aafaf9f3c","sha256":"05e0ed4070840eeac5243f24372aa4541960c70cb2f0c934c45dd3b9c86c20de","sha512":"2626e91f62d2af259ce40f67d4c6e364b4c140165bf2dfdd9b4b13807622262d862a554bd4c1b7af3b58b12bd2b1a33188e63dbf1c94de7b70884459d40f8a62","ssdeep":"","tlshash":"579002a531c75400477711e454675c85906c4c70344c998554409992ac650635515aac","size":56,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.668034Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"ece7936b29ded3a84e3e16fab6974d12","sha1":"9414a87e48e508a51ae8a3e02e67cd4fba776480","sha256":"010b3717109c6b06c079cba6fdd598931c10c034b23d8062fb7a257850196810","sha512":"85beb4f37ce74fd4b226ec155923394cbec8048b2d094a70c0b6a0388010ce700fd2a101dcd38ccf7eafc15d0d2f705d8880f234e6757920e18df0f9cd65dd0d","ssdeep":"","tlshash":"ec9002b521e66420476616a424571c849128587024489d455441e5925d655635215d6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.679587Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"16f9d804ada41056e9fe86fd97cafa9c","sha1":"67a33d618fc27bd600195d73350930b40a351499","sha256":"f2351d9666a8c17f67c2045a639103fa555e10601ab61b87800d18dc86f59f78","sha512":"1b15665529580ed9262c0142081593252749500099f7c0ec5ef559a6b32c590adebfcf720b5107f3db07c22067f973c23c651f5fea79ecb0749f5b36f55d349a","ssdeep":"","tlshash":"5cc02bc1b16f1034a390a23f033a4108f58c0d88c10144a0c08de0cb24736044736b15","size":132,"data":"","first_seen":"2026-04-30T07:01:35.848869Z","last_seen":"2026-04-30T14:33:24.182772Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"1ae2638fe717dc1a9721c2516d6cc8f8","sha1":"da474776ace698e8eeadff08461b33750dd8703b","sha256":"1625c3753219abc041367797b87805459044bee4a7714afd7cb75b5773d03b1e","sha512":"1c29b333c88989708394cf468d5cb8921c6effc2fbdc60fe4e1d4e5b7c10a14c70fc2b5148fce4c1ff2aa869c84187c39a1d4641ebe2b4b90df3c09cdfa4a3a4","ssdeep":"","tlshash":"669002a525d75825475611a4149729849028846014459f555445d5d25c690329155d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.652836Z","times_seen":896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"46dc76877682582f36bd250759d6bf22","sha1":"c2fd7796e6555d6d406108e85065b1851c75775a","sha256":"c7c5136accfc705da08a079e006f7da2139f8cfa56b9c9cb8ef942dd6b5d0334","sha512":"788d95b2ca2e0c0cd2a64cb1ff4dff5e4fc74d6ce54484d5b7de934d9625e59f21cd4a76806d09c07c57f41eff8b9a10ff57891c1341cf3f582d6d41456c73cc","ssdeep":"","tlshash":"34b092182beea42a886133052aa72269fdb505a86c042c55970070a410e4f8405aed24","size":109,"data":"","first_seen":"2026-04-30T07:01:35.900931Z","last_seen":"2026-04-30T14:36:51.888483Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"70c04ccc9c0cdef2883646e9b5fd1990","sha1":"8878bbda3746b042a48c232df092bb2c83f88bf1","sha256":"7a7af5ef25f3e91b3d042ef3c2475e10ad5985d634bb4ef2e5c2abffc074af9c","sha512":"882792ed0a348f2178c6d6d51f894e005ce53fdee6280dcd7b2e6b1450e7f3dd05b15ab4ebf459ead65c09a091e2b2e06ae8c9c1dc9367bdbc9b985314b99770","ssdeep":"","tlshash":"7101104f13e683bba8d9a4d28097412763da3411ac8c9c0e08267578225a603cc36d0d","size":719,"data":"","first_seen":"2026-04-30T07:01:35.869376Z","last_seen":"2026-04-30T14:33:24.205828Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-04-30T14:36:51.915326Z","times_seen":121057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"84c5af313a18d84195bcd1321d6dea98","sha1":"3746f45afa0f0c06fd6bde51f8112911f5b55906","sha256":"3b34a9c0c9933c5b7eaf50ff6043c3e0e87a657e6e3046031680c6b39466fb9f","sha512":"361ab3e019266a9b704d421ed24d6d0b57b4fcd5ee92d6df68c0227ec0adf79f7c5f1d00d580309c459f1e905a59ce9354bbf16eb295f19de32c4d7c7a050990","ssdeep":"","tlshash":"3da022b830c28000828f00200ce308c8a8ec082000808ae80828c8a80c2c838023ccbc","size":63,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.720438Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"2efccd9846db8386590c71ab1775f72d","sha1":"88d57904906464ee5d38992931c0653087ad029d","sha256":"ab18f1aadfb36b3e80c5782fa8185e516eb14f6227d2acfaef2b876539fcd57a","sha512":"822dee0a45e5fc8f4c9882c102cfccce0ef9faaf126557dd784b4922511c923aa5539f0dff206aa77d9b3ec795440bab9c5a62de8a9f705a6b3ac841424f873c","ssdeep":"","tlshash":"aca002b5b5d2510092df11752ca718c4956d4860141499ed6814d8a56d6d835d23dc6c","size":62,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.698345Z","times_seen":903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"322d92b69a4ad462bed9087799ff4e83","sha1":"cef1e2672658fab6dc869fa3bbabfa0f768f0013","sha256":"d5419caf5e43fc491fbbcf1be9ee568249d47850d8dc4c8fa4352bd7d57a660b","sha512":"cbb9062581484ccb2a3bc18160f35d170e958c654b0b13dceff4190a83551da179248dfe3fc29d2ae02d8fdb4456d7dafd756e5ad04ca297fa3d64e4bc7cddc1","ssdeep":"","tlshash":"37e0c2f03490934151c898d3ec230e02a7835c0d67c8be07d3a3e148ada94ee6217a38","size":306,"data":"","first_seen":"2026-04-30T07:01:35.919044Z","last_seen":"2026-04-30T14:33:24.244522Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10e2ce1ca6d99518ca052419017b7bc7","sha1":"2c574b7b4783de2315674c2909ca67d46d5b7f02","sha256":"8249cf31b6f73dd252f306bc77eefe5bdb3f3302f7316c2c07b090a215a9a225","sha512":"4c5e0a2e2034a1695b115d60814a3a80888de954e9be5c3aa24ff9e89a4328d3f1f131d2ee4f245d7564f245fc25056901b18a7049ee9e8362b032c180bbbf12","ssdeep":"","tlshash":"f9a001281855349c2976a9a9489b4184e169858ea0a4a8038a28da5297ed256e20299b","size":78,"data":"","first_seen":"2026-04-30T07:01:35.938589Z","last_seen":"2026-04-30T14:33:24.232471Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8030aac38dd093d491b3c10cb59832f2","sha1":"04affb5109a0a8874c988e11f0385f49a12efb8c","sha256":"d6af0b0da416de4d5386bd22defd39a8c449e520a92ebe39d76928747a989671","sha512":"18e22e017bb04adcd8033e8b4cf567f61270bed9bec91b12a0804b89af01dbcb8d00b6d8820cbd13cb0d41b9da85dd93ebdb86016767636c0b9db633955320d4","ssdeep":"","tlshash":"c710000000000000000030000000000000000000000000000000000000000000c00c00","size":2,"data":"","first_seen":"2023-03-11T12:22:41Z","last_seen":"2026-04-30T14:33:24.211124Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"183e2e810aff9405ef12dea8191e3312","sha1":"77ad690ebaea050d02dd4151e0db9fd8c8927d30","sha256":"7a2021ff5afd4bedd3b30f48d0fe64da919272414695c6106634f82aa558f84f","sha512":"604e405bcfa5edb222ba4819a19c74535be1b459a26cbbb8c95c0485bd0b9088885b9a5c97d0be6673d327f5d9a70dd4c85fda7d406ae191dac57809e5538cea","ssdeep":"","tlshash":"63a022e220c238000b0220a008c30cc0803c8022080088cf3200a0b38c2803300aaf2c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.8277Z","times_seen":944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"deeb2e2536ada26166c8bfcf13c3c006","sha1":"408c404bcb05a9d4b1dded9b593e066aa324be2a","sha256":"8abd60db6e0615e782b4ba972e7b218829f4f51c577be1b15840cc53116594d4","sha512":"35f3b5fb972ac0d691ae6fc8182ea76439e47281fcd047bdc35c67e5e85db46c6750906c6e84764b0e75d2c2e19c5c24cb6d85ce5469a901bd3fc72c04b5ace5","ssdeep":"","tlshash":"5aa002b5b9c29000829f12653ca798c495ad44601098d9ed5815d4e56f6d835535ed6c","size":66,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.822698Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cdddffe/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f87471a3d1fb33be6a51912861776bb","sha1":"8bb52b99066392f10ab336b980dfbe0b8fb4dfc6","sha256":"34e2fac9b502488543160a64f763a23608d196acf4dd0c4fecd57ef957572fcf","sha512":"a363d37884af6c3b20e287e9324a16055968acc28d04f79d7acb9b5f8a0cc67e7edf70d05495a9e9dbe14996e704484d9b710ae06e12bd6d87d9d68b515a54e0","ssdeep":"192:xbPfmk/7Obf14M6dOIpUTPqZ8BijFLeEJK:x7fH7ObdFWOIphZ8wjFCmK","tlshash":"a222d71ee7017f360fa613c3744f7b5376a480e592646c75d89c826943b9bcab217b8c","size":10670,"data":"","first_seen":"2026-03-31T14:01:24.495424Z","last_seen":"2026-04-30T14:53:57.371399Z","times_seen":645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"374b0c1c58109f05088d7fb1ef72ec42","sha1":"d9e764bc8291940034398499780594f1736d533c","sha256":"180f3b5528123f140c4bc7ac04747ed37e8058556e86e3895d3051dd57d0294a","sha512":"ac1ec1070b1db4af7aebfc1c0e5fd042bd8aadad9d23b26cdc62fc8014e78fe12918a44e6ffd1fa090c21ccc2b4bbb304d6b3837e642b33b4ce804363efc3f32","ssdeep":"","tlshash":"9301445cc9436a26210b60ed713fa05038b8000b8805e81eba4dd590af25e886d07ded","size":799,"data":"","first_seen":"2025-12-13T13:06:49.033522Z","last_seen":"2026-04-30T10:35:31.855793Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"c8e619dfe4897537d5928090e3eef1e8","sha1":"e5eaf81982427555a29c0b39303dba0d4f034fe4","sha256":"92c40f0e254e242a63e528e55805daff7d6452cd2e5e4b287af39bb80ac86f37","sha512":"41a803c588cd6e8eb60604f36f64b9ad296d7716782a6423e521a7252c3cb593ea4b99bfadb497567207df88b56b668e8cb00c13aa0d45c3a59999e928341f83","ssdeep":"","tlshash":"2d9002a661c65400475211a414675886902444602844da45544095e25d65422521696c","size":49,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T10:43:08.590956Z","times_seen":378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-04-30T14:36:51.975619Z","times_seen":138983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/moment.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","size":150941,"data":"","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-04-30T14:40:38.639372Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"ff298be29451b87d3c6ddcccd831d345","sha1":"a09186b4eab2ac885db236f068b37a360640d38b","sha256":"7633191875649be900b5de5102a6d38d1d2fd1aac17e6936a9d1b2e35bd921b0","sha512":"3e5684054d7132fc5c212d25a01c1b82394157329f9a74833d03ba5a9e212bde9737fc845cf692493cf39ddbdd3242f3a4a3cb1853842ed9a50d94bdcdff7177","ssdeep":"","tlshash":"539002a5b1c65440475651b418675884a025586114549a456541e5925c790229155d6c","size":50,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.719593Z","times_seen":989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"297ae5b7e56994c927c68953285c6492","sha1":"c74303038e1e417c3507a4f0c76711c2addc36b4","sha256":"06c5e9dafc9c918a560047bb43247f0daeea9f3d47da2ab6ab16e850ba502e21","sha512":"a8ab16464ee5b9e4c01f09eb83157932b5f24b6d7d0bc925da954299190f21e9a146e98504a0bbb72579f16d1e0cbaf3f9890a8050ade8b68f424ca28cef44f5","ssdeep":"","tlshash":"e6a022b830c28000828f00a00ce30888b0ec00200080caea0828c0802c2c838023cc3c","size":63,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.802416Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"f0db5a717936f2ca5f4d45cfe51e4468","sha1":"50385d524af52d7556ba3e59e9d421222c49d984","sha256":"75f7c6d22cc19c4a5258bec9172f7a113b53c1ac48cbf98fc841d07ef9528f68","sha512":"6daa4280288770efdb1fadc04cf961097d74773fb3660bc00daff1b8402a8655e05b81804fbd590538601febbb7511c4002a9107f6eb7668483c9732eec87eda","ssdeep":"","tlshash":"d4a022e823c302000ba200e020033880803080300c00b8000800c8b20e3a0a2e0228ec","size":59,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.703455Z","times_seen":999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"ba0daf25202bca06f94af7da9a1f12d6","sha1":"015b76c0cd73c232fc2cdae161505b8a85b653ab","sha256":"2fe05dfce343ff79e08b1327869c3810f452f2e0f463aac0c83588fa3e9c76f4","sha512":"55a01dfa1c8a6ca38738b032ccc296af4c236373b4b6ddb0301a430174129385466536ae42c86f9c910d47f5ca2aba2a6a59a1307610cc7ad43d22cb57e7e117","ssdeep":"","tlshash":"5f9002a621d65500579211b4155b18849024446028449a49644195925c694329235a6c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.673611Z","times_seen":922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"50a42204409d4960be74b60bc7449202","sha1":"4a6bc5ba299a11c027429529df32995b6f8720ba","sha256":"ad39af33539ade9ee75a3871ad6c71589cda04c00dd812a52fe57060a6514577","sha512":"6f2efbf32e20abcf74ab1d83e7568a7c3e1b06d89ec30cf7f4912a672708dece4978b4a9017e2e4d6ef6e8606070da5d21c1856236ec4677a7419e2689a17c2c","ssdeep":"","tlshash":"549002ea22c75815475651e414971a84902884a024459d455444d5d25c694329155d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.64889Z","times_seen":884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"9c180274b38bab326a9aa0aec6f805b5","sha1":"3ac187849cbb83f9e835a7f237e124e5905897ae","sha256":"02a97ebd114d6cd1a59b4a751cbd751199a497b17135e6b63630d902c590f6be","sha512":"372519ca1a7efaf27144abe853b222d5ee5e856a0d4fe7ad11d66d9b05f34859a631d0b7e61ce9fbe2c26366a258cd8e5415a4d4a9777194bcd32dd4f40bf3b8","ssdeep":"","tlshash":"6e9002a661c65808475222a414575c849024447418449a45584095925c654226115a6c","size":49,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.765221Z","times_seen":823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9fe2414474bae3193f6f7c9660a0ae64","sha1":"f6b7c67f781e67d4b5afb7ed0380ce22801f45ad","sha256":"d2592b60ee5cdc4d0f8c790be927c67977ad51f7ec21ce9d904f3410e107160c","sha512":"cb7db860af90b162d181d9e01ec058d0837a2a66c7459527665ce74a7ad3aa37a84362b6e3bdee5b917ab8628481419035727519f089e1f964230bad9a7911ac","ssdeep":"","tlshash":"c7100000000000000000c0000000300000000000003000000000000000000000000c00","size":2,"data":"","first_seen":"2023-04-03T23:55:30Z","last_seen":"2026-04-30T14:33:24.199806Z","times_seen":548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"6930bef807afecc775295b5da8a57f67","sha1":"29c118c456f63796b21cac7d9a68cbe723a6c20b","sha256":"b15123a642347808a7fb6b683f38f32b856433e84ca861565c44849e1b29c547","sha512":"dcc100ae2f598baa386884d26c439b53b1690cb4946a86bde4e0a35c604fe23ef9edbbe0b0578b6cb4febef2495698c354e1f5a04dcc483d639d1a8bfb05d474","ssdeep":"","tlshash":"9d9002a521c69408475211a524671888956444601646ad455440d5a29c69162512597d","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.676272Z","times_seen":844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"e562dd896ac4d3c02dbbf846de7d12db","sha1":"231e3aed32b82f17d971a11ee73be3bb56390476","sha256":"e0cfa4c4edd139ab165a2797e3dfba257e50205b1c6ef90a218cfed169b28af2","sha512":"f87032635de78b01179a826d4132025505ddb632b1bd71290efce46b7dcca0e5cdf3618d6e9ad32e4ac304ce8675942733f852ae97da310ad7ac240bffed43dd","ssdeep":"24576:wGxs0yWm9e9PF7QIOrmQ1eSMHg74lhSCzJNGb8C:wGxs0yV9e9PF7fOrmQ1eSMHg743SCzJc","tlshash":"ae656cd5b2c5f4a507e301e6943b1002a33a2c1a740da468fbbcdcd7a95a58e6337f79","size":1516000,"data":"","first_seen":"2026-04-27T13:22:49.49286Z","last_seen":"2026-04-30T15:09:11.977121Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:02.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 18:54:05 GMT\r\nexpires: Thu, 29 Apr 2027 18:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56217\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-30T14:35:46.852168Z","times_seen":775299,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.dC6psI5ph6o.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywHg-6Xc7_tFzA_Yy_Mdz98k7ILBmA/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:03.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.dC6psI5ph6o.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywHg-6Xc7_tFzA_Yy_Mdz98k7ILBmA/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 188227\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Apr 2026 12:40:26 GMT\r\nexpires: Wed, 28 Apr 2027 12:40:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 28 Apr 2026 01:09:18 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 165037\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":644446,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2125)","md5":"a480d36e3f619d2e282a7691609c2003","sha1":"66f4af8ef8ee395d7ae8bbae46ff425d1830f870","sha256":"bb6ca19ba5f62b65dee41952cc5ce45cce7fb27169c8c19ffdd82ac1a51bfddd","sha512":"987f6c95c0232f32a68112b1b67d38da194da7393f02eb761dbdc52d9f72894fbe92c1ee40cd7826824393b69a93a27e5cf2910c5dea18db33eb338286965786","ssdeep":"12288:7Z3+gELkvBYTFtXUeyjCAdZ7lDxEJKQh52TUK:d3+CveTF5UeyjCAdZk27","tlshash":"b0d46de073a2b1b5c7426d6af87f4043b17e5d01e1044834f1f6addc65f8e48a2bab69","first_seen":"2026-04-28T15:07:20.318115Z","last_seen":"2026-04-30T14:50:42.919456Z","times_seen":1337,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.dC6psI5ph6o.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywHg-6Xc7_tFzA_Yy_Mdz98k7ILBmA/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:02.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.dC6psI5ph6o.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywHg-6Xc7_tFzA_Yy_Mdz98k7ILBmA/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 143073\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Apr 2026 12:40:25 GMT\r\nexpires: Wed, 28 Apr 2027 12:40:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 28 Apr 2026 01:09:18 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 165037\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":422659,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"d77605ec306ad4c000abec16b41bf672","sha1":"f81ffa4fe5d08796f34035bb4d9cadfbb010e04a","sha256":"b6cd0873d1450f3695c818dd7b183c248d34596c25e990d327c2298024f9da5f","sha512":"9aa50ba612bb3cd54f8f3bb2fa081215b8e66dcfe68f5b81040dc465b81d3a5e187168ff90980f1cc5c7556a74d7b840f5d6d7b5ec9655bc82af695412b5c69a","ssdeep":"6144:TlrvDLunTeSZMSTiSrJbeqe8DUim8dZtaW698+OYoH9lGl5eXdpWIG/0:TfmrJbepb8lEgXdpWr/0","tlshash":"b7944cd977a2707392a2f5a5902f0103b17a6896f44c8c7cb788ddd16eb494942fbf38","first_seen":"2026-04-28T15:07:20.359429Z","last_seen":"2026-04-30T14:50:42.921197Z","times_seen":1340,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/storage/app/public/photos/yXff6zHHhCC79VpNGOcQvep5NUBiQGYfO7GN2AbS.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:03.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /storage/app/public/photos/yXff6zHHhCC79VpNGOcQvep5NUBiQGYfO7GN2AbS.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 11:50:50 GMT\r\netag: \"b2f3-69ad629a-f37c3766c6873442;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 45811\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45811,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, datetime=2026:01:07 13:44:53, width=0], baseline, precision 8, 1468x375, components 3","md5":"735e30b1d58ee6263db0f009415e7cff","sha1":"62e85334466170cf180686b9c59e79fd10aa94b8","sha256":"9a4fcdec358e50d7af2f2ce5cb4dab3ec4d081104cf9608f2a02e629686d08e3","sha512":"3904c9055ca2f6d718210d7ba7738dd41e746ca13da3e486de2168cd48963b3bb2d7d301ca8808ad5f90d9b40508a035c6afab9c4f83f3992fb61c19571a71ff","ssdeep":"768:NwqC5Ya9FVmSSaXcHzvRw/SYBGG5mbh/8XSkJkigxLQfzy1O3zkF6c4QIN:iF5YFSPXARESYpKJH2gLEzy1OgF34v","tlshash":"ad237b6b1e539573391fc1708f66791da082221057d30339acbe3bffa6bd64a1e9ad00","first_seen":"2026-04-30T10:31:50.157809Z","last_seen":"2026-04-30T10:35:31.604641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:04.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Thu, 30 Apr 2026 10:31:04 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:35:17.446879Z","times_seen":14427018,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":58,"dns":27,"connect":8,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:04.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1747\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1747,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$G4Q5hOBRAAZaYjyTemLeO68DopglZ3unAEABEArZ1KhI3YQ9ywmOtIvedv7ZiG4VJuiAbY1Qb8226c-r6Qid8p840NR48xuW4-lKAIRYcYl4BcbInckfiXE5ngAAAXfOAAAAQPQBB-IAU76OEaHnv-qTMUAM7JdLoRrz4S3HiFTzc8ipSkz47kE8t4oP0dCrPODms64xe3OTyrzxNlgLuFe5bSs132_xxL3_zbxNRIj0Yw5ZWFezsqOgkME7BQRJROAYq1hbaeku2LPFg4P24mzFqqFId-0l8k2KhWayfNPXkpKfI2RTGkPtYJnuv0suB5hzfMdwbo3ud6lQAGrL9VQNy_YLaCjeZyPlbzEDuFlWqy4TWMa8D3HEnGJnvqoPLxmF2X_Z9HojnQ-Id7hWYRrDB-1FNhvri2YIfDrw8pbZl8bVM-W5amMzRQKAQw38qfShxc2JxxwyLTK5mJaxd3S5bIiNO_sdJ81rP3nXgNpfJkC0H7IoRDseU-GIJeEKLBrSuh614GKlJzprntnheZStrD2ib1Pq74uiKKSNf8HqDQE0b_w44Q2JoFXo3c6_IPv6FDuq9ANJeBCzbWBpm6vQxoVTn4FmSRJoozsU6G2IIzFK1MFJ797CceyOHaaU3O0Cmc9MLP-ojgoSMc7cdv2dDp_njeRBqWLfYJc9PdsnoDLiY0eypg1evKUuymnh3NM49mbmNpHduKwMfab5DIjHNyHtsnbHJte1ZNcI0d-QExBwl-3ljSSBKM2yOl19C_Eez7MyMjpenEeA70hz9JVmB-iP-vVEL2XbESe52G2SeJGMLzfoLH6BW_LVQ-UbL7w_GGZsblJBj2S4OUmJ5u9OsQ6MN__lPP49e7QpWhcu5ppzfqWkFo0QCeX4agQlH0BeKfh-xc6-VPC_KYduk1HyF6kPEfzPiQbd6_NmhjIzOsCmhbuQTsDQfJyY4J7TBC1CMdAnS6nk_R32R8RcDzJz_0G36RCiV4AfBROvxBRjnoLyj31k2TE8Mv_9Fhb4RCrTRJHfS3FThp0WYrrHVeXVxzvUwDug2Msr7VfigwKexlYSGS2wicO6Qfe4GNByjyWmL04vjBWDYSPw33XKEerqS7LjU9lhW5TRD2C2A7bxq5ny-Fw72w4mIOpGa7Y5WUz8Tjtw4MBcoiuyQkbC0bWPANfM0qWoLAlTd56zOYJKiJTMpG3vBliDHF9rh9kZ1dfSRTMkjEp3gtPuNuJgiOw_RDk3xuuyHMVTQhOjnDJYC0RRhUyVZernm7jRoMvvFf_sa3O7mbenDSS2dVu6UYdDCAv4EadYRG6ydfGx_HRGk628EJnGXUNlR-Sk4W_J25EY5DTBQ5x-24GQigOF0NxUxjIgOGw6FhkEVlBy0A2Wb0EDMmQKAKSrlqYs6OmWexWkn88d7vAuM6jvPl00wtJfqlv896UGG7hF_Xewy2ZZT2M11JepLkzV52d869tiF3RH6C3iAI7C-rQtTY6Z545wF1IbxobDeyA7jjTTRKP8QOpXQk9_LvEqvlqFShVffxNnpXCWsa3Irc_6IxFippRb6a-_qP-z9MQWeoqdG4Lsceac96MgXBs2Jnq1rUhH9koJr_U_TecbOB62K8hbI41dcepfvdm4jNab0GlfY-HV_JSMzDL3Q-d9gYGXdAJ4mhw8gNQxLGEGwSa66rCzYvev1x6CcuNfkLopqmkP3PPE5ad9dQ6Xuek\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Thu, 30 Apr 2026 10:31:04 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"c9131f2ac3904bc3633d22220c8713c1","sha1":"ae483e0c0759a777e2195f0b9bfaa76c1a1d1385","sha256":"b4beb54a0ba53494c885f423fe4c3db687087010893741e87ae96369cd74a1d6","sha512":"50f89fa2c011334a90969e35847e16fdff0938ab074f88e75235910873b2d402ebf9b7ad3469f9743a3340c566c443c0cca643359ec717f6a2296104edf1e93c","ssdeep":"","tlshash":"79b012d30188ddb388654947a3b1e902920201e04d683e40bbd423c41d4efaecdc93e4","first_seen":"2026-04-30T10:31:50.161514Z","last_seen":"2026-04-30T10:31:50.161514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":3,"dns":0,"connect":0,"send":1,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/popper.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/js/popper.min.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"51ed-65e06905-32975e5ffea11bae;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7158\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20973,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20800)","md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T14:40:38.634058Z","times_seen":7237,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/bootstrap-select.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"1b35f-65e06905-ebde2bc4ff923a29;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 24735\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":111455,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-04-30T14:40:38.609201Z","times_seen":429,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/imager5555.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/imager5555.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"30e8-65e06905-4144ee95ca4172ec;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12520\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 164x164, components 3","md5":"a09f123688ddee8c4e9c7547561a758d","sha1":"640721b8ac50bb159d54fd37835b1dd88ba8485f","sha256":"2d6a74d0be29e0833594ca7f35a38ff9ca8b80bbee0da06d9e4fad985e806d4a","sha512":"0e10a9fbfa0c43b9891c320ab25da23c1337924b8a1c4ee40a0bc02d0ddb0f2429f1e6b3372f89bb30d1693e8608e2e698d3d521734f6fe0240f7aee89a6c2bc","ssdeep":"384:rrgXSGGdXjidmAVwVg//CJ4MB9NQ9Q0oT:rUXMdmdmuwVgLO4U","tlshash":"4042c041e65faf0d66da2ba24dcbd61b70ad3d1684db09c3ad3b711334528c44eb553c","first_seen":"2025-03-18T04:27:57.422693Z","last_seen":"2026-04-30T14:40:38.609872Z","times_seen":315,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/proccess-box-arrow.png","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/proccess-box-arrow.png HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"3fce-65e06905-5bcad7b597b0e730;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 16334\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1490 x 263, 8-bit/color RGBA, non-interlaced","md5":"0dd316e116e17f7d7517466f824ce9b7","sha1":"4543ef53c6fa9fe6e4a3247e3549a2558d9c8178","sha256":"70a4fe15a5bd83d6c6be718edd76d79f376a2ec053ed4f145c10a89f7722ca83","sha512":"6d7a588326f88ddfe15a0ef2f0c114793a7be74c09c1ea24cbb69dab07a37f1ebcc108da1968f8a8f04164b2d0110d1d75e649545b83ee998b30fb9e2b1fbf20","ssdeep":"384:k+EBl/lCSqJz6KOG3QgdziFeKzU6Cb0HC63jjfLy:k/RlCj/BRBigKzU6Coi63jDm","tlshash":"a972cfc7e09f1c32dd446a7af0fb1f57b694478e0a6041717fadcd6518239486acbc86","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-04-30T14:40:38.620934Z","times_seen":371,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 30 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7706\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T14:40:38.60459Z","times_seen":6163,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/flaticon/Flaticon.woff2","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/flaticon/Flaticon.woff2 HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/temp/custom/flaticon/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"3d14-65e06905-810e7b5466e4c3b3;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 15636\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15636, version 1.0","md5":"7e6e07c9567fead57aad008ba0f35ad8","sha1":"d5fc38cc2b8feeee4abaf792ec9a0975988d5595","sha256":"97715d73c5593d1985486d8af235ffac8e7a08cad8e5c0517b115fa7bc372053","sha512":"ef21213d3cbdf6c17abfdb044c8dc8ec159173ff43ab2e9c833d6416a23df06785ccb8dc056f6f587b8712c1028f1d56a4c454f62a807fe5f35ca368fae86f5e","ssdeep":"384:Uc5Cd909FNFKcI3gyIaNMqhmM21zjlBRc2:UYCdSbecwfh4N1","tlshash":"2d62d16323b0dfa8e7df61618d25f03dc35f092590228eeed3d5e9940028fe46da0ac5","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-04-30T14:40:38.605273Z","times_seen":382,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/ggsggsgggg","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 18:57:07 GMT","end":"Wed, 22 Jul 2026 19:57:03 GMT"},"fingerprint":{"sha1":"EF:26:C4:2A:CB:E2:83:16:B4:53:B5:CF:6E:85:7C:AA:DA:A2:26:0F","sha256":"70:4B:53:AD:C6:32:73:F5:C8:5B:91:5F:7F:3E:C6:BF:1A:9E:61:B3:B8:A8:A3:4C:A6:BA:37:F3:8D:F4:93:89"}}},"request":{"raw":"GET /ggsggsgggg HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 9\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvKwourHzJy%2BP0m0BT3ZGusXNziZRhw0NT5tSBa8YJpG2l7qMhURAnMb8VTuCjOUxeaqfRRG7ahGiIYgYfXyjKIjafg8IOI6Um5f0NbCaVZwGfQKQ5R%2BlbR8L7cV4fQ%3D\"}]}\r\ncf-ray: 9f45dfe3bddbb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:35:17.446879Z","times_seen":14427018,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T10:31:00.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; expires=Thu, 30-Apr-2026 12:31:01 GMT; Max-Age=7200; path=/; samesite=lax; secure\nroyal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D; expires=Thu, 30-Apr-2026 12:31:01 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 9607\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":40071,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (626), with CRLF, LF line terminators","md5":"46665e6c8fb4216528614ad4732f5ff8","sha1":"cd9bd1402a155343ec607b440a79498a45680d9a","sha256":"e2f116bd1c883f1db1ff25cf2e1cf20644a07ef73c82bc12d15d283d1c4b2a5d","sha512":"7a71518f8d810cddbce89dbff5b1f3d7e7b09722c67c80c30d0dbe28768e27e6572747e37bc0d7fe01439d889cd5f5a4985ac9b514ce3a8f97a1837c5bd480b6","ssdeep":"768:ysC3FELEAMN2tVs7G3I58FO05jC7eI2rOwmi32Do:kELVMN2ns7B/wP2Do","tlshash":"4303a32164892e7b016382d3a2307399f9df8e67d61b8991f2ff03965fe2c88c917475","first_seen":"2026-04-30T10:31:50.1747Z","last_seen":"2026-04-30T10:35:31.65541Z","times_seen":2,"resource_available":true,"data":null}},"time_used":931,"timings":{"blocked":232,"dns":94,"connect":21,"send":0,"wait":466,"receive":1,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/row-bgimage-3.png","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/row-bgimage-3.png HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"767f-65e06905-e16b79528d3a9872;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 30335\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 637 x 321, 8-bit/color RGBA, non-interlaced","md5":"4fb3f9e980052107dc63d209f3e3a4e6","sha1":"42e7058bb8018444ad63b60822f504673e83b084","sha256":"e15aaf1d7e0e6d01a65f5142340ae08db269c646596baf9e8678b951014718f9","sha512":"858a60b8f5ac9b069638816288c901df10f578dbae07b45f8ef2206364a93a2a05d82516858f4c5f51a7e83a02a6d51f088e09ac6d415a0807f0212dd5fa7a75","ssdeep":"768:IdVL1Bg91o2uFmlwsGPKNL6aFpq9jsbr8EbQfWB3B:IdzeHo5FttU6SpmjQr8EbS0B","tlshash":"4dd2f13398b29448c01de0327b86db13067f4bf0ca59fa56677124723525764cf6bd6e","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-04-30T14:40:38.635114Z","times_seen":365,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/slick/fonts/slick.woff","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/slick/fonts/slick.woff HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/temp/custom/slick/slick-theme.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-font-woff\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"564-65e06905-a152ebb9fc8d6cda;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1380\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-04-30T14:47:36.266621Z","times_seen":20509,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/44/large/xrp-symbol-white-128.png?1696501442","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/44/large/xrp-symbol-white-128.png?1696501442 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 12328\r\nx-amz-id-2: uSqYp0SeAQ4CdEuo4ebnDEnQVXHH/GA2ikWI0X0oKub9wG+lDfZEh7tKeo0KSdKcyM5gVsLSsz4=\r\nx-amz-request-id: F55DNKY1BQ3ZHKDJ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:58:49 GMT\r\netag: \"8c9a8c477f324c88cead49db9a5fc1a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dvTdjQhaHPc3d2gEiPjuvrzI.pMVPEqU\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 4710\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FaTj58SKwuFXcvNiYmFn6hWdDZTjpal6KSK3pEvHd3Cg4mElrwYMoASrkxALy%2Bv0Q1mKO06QCkzlXZp8RlT3SupH0NiKW5Apf5UNHggR61nXnLamlvMehdzmn2EH1bwGUXvYmTUTGvFlGlXj\"}]}\r\ncf-ray: 9f45dfe1daeda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8c9a8c477f324c88cead49db9a5fc1a2","sha1":"8a8a7c615c7f00893e4c3374ad134581a053c8ce","sha256":"3672b3785d85e582ef497a6588dbe75cef4c60f982f678549f309fe784400a2b","sha512":"849e4018007f9b5406d4910a2da39689fcf847bce6f8586c7db389066af1efaf9ae8ae5bd374401b285d988a16fc2480be1e813a6ae3e2af78f485efa523fab4","ssdeep":"384:BFv36FCrffjNiI0gXcwWIzS3qJ+GmJQauo:jIqaGK3qJGbuo","tlshash":"56429d3b1465c94a4b535f7ec1ed4bb386f31224cdf224e69d781a02db0e61a2f390da","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T15:02:15.831637Z","times_seen":1078,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":72,"dns":17,"connect":4,"send":0,"wait":9,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/vIM7uNEL8MT8E4ZKZObMQGPw_iVvDoGVAoiHrGqTTLI.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:03.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"GET /js/th/vIM7uNEL8MT8E4ZKZObMQGPw_iVvDoGVAoiHrGqTTLI.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23691\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 17:05:54 GMT\r\nexpires: Tue, 27 Apr 2027 17:05:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 235509\r\nlast-modified: Mon, 20 Apr 2026 09:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62587,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61343)","md5":"2945340bcbb5e00ccb209b32471a993a","sha1":"87e2ab4561dd8f3778a5e204471d4733a5adf72c","sha256":"bc833bb8d10bf0c4fc13864a64e6cc4063f0fe256f0e8195028887ac6a934cb2","sha512":"68d1bbc7182dbca655b8de145188ac5945a90de2ffa4cec85acffdff0939cfbbb90a89291dfad6b94eeabd43b7c8c22c000a818ea2efa925aac48268a2370b10","ssdeep":"1536:jMOeI33FoJ8zKKiSCx4YvQ7QpYALVP8x3:xz3VoJ3CY3py","tlshash":"405319ceb2d573755ae6a1f20047510aa37e65195c88289fbd12f6f01eb0e87823bf74","first_seen":"2026-04-30T07:01:35.766947Z","last_seen":"2026-04-30T14:36:51.842026Z","times_seen":210,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":120,"dns":2,"connect":21,"send":0,"wait":24,"receive":18,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?Deed_A","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:03.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /generate_204?Deed_A HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:35:17.446879Z","times_seen":14427018,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/cdddffe/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:04.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /css/cdddffe/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 10:31:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 25535\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69ef3c38-63bf\"\r\nexpires: Thu, 07 May 2026 13:51:33 GMT\r\nlast-modified: Mon, 27 Apr 2026 10:36:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-27T13:51:33+00:00\r\nx-node: m9p-up-gc71\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"041432f71dc9bc619e6d6b6cb8f6d90f","sha1":"93bef8763a54d977d1b59c07353b2211296005d1","sha256":"c54015d15bee5fa4c4b0279b81dd37c2da14fdb0aefcbed726b4f062f1ad7d72","sha512":"751778dc90451376573375f1ab343498871c15bd42721f03feb76c9c0afcbc39a4c222fd12bd0aa5d9a5a9702709a442dde001ee2157b78a9aca587b0087e82b","ssdeep":"1536:yL5YTK1yt6s6UrhRDuGyr2a2fSup2yM6j6F+Lld4EUl61F6PQniDOIOADF6XckoQ:1Wq2VfoZ3YHH3I","tlshash":"ffd3e86aead1a53ce51a581ac8c5aa3ca63dd102cf231dbff744f3e147c76e21276805","first_seen":"2026-04-27T13:22:49.046602Z","last_seen":"2026-04-30T15:09:11.940771Z","times_seen":243,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:05.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 10:31:05 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69de0593-16b0\"\r\nexpires: Wed, 20 May 2026 11:29:57 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-20T11:29:57+00:00\r\nx-node: m9p-up-gc7\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-30T14:53:57.291217Z","times_seen":14249,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/jquery.form.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"ab23-65e06905-e39fa12ec33d1e47;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11763\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43811,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-04-30T14:40:38.611121Z","times_seen":537,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/css/intlTelInput.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/css/intlTelInput.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"70c8-65e06905-4fd2e15e6871d707;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2916\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"36ad59bd54fb93f8e30e3273470b91f1","sha1":"687880cd4146a6841f427ccf8f7dc38084996db7","sha256":"67215ee6059ca860b0c9947f70b739ab8cf2c53ba74d7ab1aa950cbf84fa7c2b","sha512":"d9a968bca0889c579b40efbaf1fc6d6f9fddcd48f80116f33693da9de3bee54ec1a56fa59b4e50a6980371be72e6de645d85cd0f162392c5e4a13daf4be19ed3","ssdeep":"384:9QVEnIft6NOMiac6LHvybiRF6y+CV5mxX5Yl:9jIft6T","tlshash":"d3d24c25cb603409b13bf372e6a04782eb37102be90246acb3da7d55dfa50e455e2fe1","first_seen":"2025-03-18T04:27:46.827076Z","last_seen":"2026-04-30T14:40:38.614092Z","times_seen":357,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/slick/slick.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/slick/slick.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"15475-65e06905-ac8d87bb53f47302;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14215\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-04-30T14:40:38.620398Z","times_seen":511,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/slick/slick.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/slick/slick.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"15475-65e06905-ac8d87bb53f47302;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14215\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-04-30T14:40:38.620398Z","times_seen":511,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0980151a/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:02.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/player/0980151a/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 59120\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 07:23:09 GMT\r\nexpires: Tue, 27 Apr 2027 07:23:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 04:19:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 270473\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":518755,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"66ef061729b27a4257a868ada7f49f37","sha1":"3d7b5e2bb844723e8e834a26e74169f53b86d32c","sha256":"f140b6831469664f09fb07ae991e983b46752deaa9d8a8b214852f235ea6e7d0","sha512":"0decb25ecfbf4819354251af5188e52fa9b5333c9828998606993817b52a6e43793f7c6ebfb87ffab61c628fa709c858898723f01e1c8d666dc7f7cf2df818fb","ssdeep":"6144:Q8d5Fe/qoMOg7USBfrIoI3M5Kdl5+Oi4f7:jYxMOg7USZIoIc5Kdl5FD","tlshash":"6fb4d972f0e1233cb2278d5997d9954d7339d983e2e22afff11166dacbc76811326206","first_seen":"2026-04-21T05:00:52.033852Z","last_seen":"2026-04-30T14:40:08.152824Z","times_seen":6624,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/storage/app/public/photos/yXff6zHHhCC79VpNGOcQvep5NUBiQGYfO7GN2AbS.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:03.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /storage/app/public/photos/yXff6zHHhCC79VpNGOcQvep5NUBiQGYfO7GN2AbS.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 11:50:50 GMT\r\netag: \"b2f3-69ad629a-f37c3766c6873442;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 45811\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45811,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, datetime=2026:01:07 13:44:53, width=0], baseline, precision 8, 1468x375, components 3","md5":"735e30b1d58ee6263db0f009415e7cff","sha1":"62e85334466170cf180686b9c59e79fd10aa94b8","sha256":"9a4fcdec358e50d7af2f2ce5cb4dab3ec4d081104cf9608f2a02e629686d08e3","sha512":"3904c9055ca2f6d718210d7ba7738dd41e746ca13da3e486de2168cd48963b3bb2d7d301ca8808ad5f90d9b40508a035c6afab9c4f83f3992fb61c19571a71ff","ssdeep":"768:NwqC5Ya9FVmSSaXcHzvRw/SYBGG5mbh/8XSkJkigxLQfzy1O3zkF6c4QIN:iF5YFSPXARESYpKJH2gLEzy1OgF34v","tlshash":"ad237b6b1e539573391fc1708f66791da082221057d30339acbe3bffa6bd64a1e9ad00","first_seen":"2026-04-30T10:31:50.157809Z","last_seen":"2026-04-30T10:35:31.604641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1777297771","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:04.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/bundle.js?rand=1777297771 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 10:31:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 341857\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69ef3c39-53761\"\r\nlast-modified: Mon, 27 Apr 2026 10:36:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-29T13:51:44+00:00\r\nx-node: m9p-up-gc58\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1550289,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"929a29a07012c618db937337fe12b5ab","sha1":"2c5578f8dc5ed5d81f390d55b3a099af15297974","sha256":"88867a565b506997c06bf955c9f1eb73e486003b555485833716c99333bbd768","sha512":"bc4b3feb78cab28928556491954ad9fc13dcf636500bba55803acf4bcff7e9413df982d207dfdd9c66e868bfdc595517ae16647ec617572fb36cfa681a41e44d","ssdeep":"24576:PIuR2z48eK9n++ePuZlhExSZCPXdPRmT3r7O1kxS9:PIuR2c8eK9n++eZSZCPXdPRmT3r7O1eQ","tlshash":"67254ac5b1d1f46502d355e6643b2009b23b285e3809b064fabcddcbfa6659e6233f39","first_seen":"2026-04-27T13:22:49.267492Z","last_seen":"2026-04-30T15:09:11.921693Z","times_seen":237,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":61,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cdddffe/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:04.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/cdddffe/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 10:31:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3431\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69ef3c39-d67\"\r\nlast-modified: Mon, 27 Apr 2026 10:36:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-29T13:51:52+00:00\r\nx-node: m9p-up-gc29\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10672,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10645), with no line terminators","md5":"0f87471a3d1fb33be6a51912861776bb","sha1":"8bb52b99066392f10ab336b980dfbe0b8fb4dfc6","sha256":"34e2fac9b502488543160a64f763a23608d196acf4dd0c4fecd57ef957572fcf","sha512":"a363d37884af6c3b20e287e9324a16055968acc28d04f79d7acb9b5f8a0cc67e7edf70d05495a9e9dbe14996e704484d9b710ae06e12bd6d87d9d68b515a54e0","ssdeep":"192:xbPfmk/7Obf14M6dOIpUTPqZ8BijFLeEJK:x7fH7ObdFWOIphZ8wjFCmK","tlshash":"a222d71ee7017f360fa613c3744f7b5376a480e592646c75d89c826943b9bcab217b8c","first_seen":"2026-03-31T14:01:24.495424Z","last_seen":"2026-04-30T14:53:57.371399Z","times_seen":645,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/livestamp.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/js/livestamp.min.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"586-65e06905-7448068b9d68d769;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 590\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (520)","md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-04-30T14:40:38.626328Z","times_seen":393,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/menu.svg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/menu.svg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"3d6-65e06905-83739d853e27946b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 481\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"464397bb0033a309123c20bdc1306166","sha1":"1dd2aff9a642f3c01942fafa22fa27483762f223","sha256":"dc1db702ebdb8a1218082fd20e55ec5a0af59e92393f2a7ab7f9bacc790499a2","sha512":"4009186075ca4204205219bdd31c92c89ae212af6a4c90688687333e02bba751ac4a6eecb54d363c42e7821d13e25e5100df3add3e8f9d1b05f5512e9c477f90","ssdeep":"","tlshash":"a311214f4752dcbe243643a877f425c63bf08c57c1b149e09a273c37f42d5608e99168","first_seen":"2025-04-28T01:39:11.795951Z","last_seen":"2026-04-30T14:40:38.623306Z","times_seen":355,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/v3_0473660.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/v3_0473660.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"195d-65e06905-9349a0fc22a1e98e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 6493\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 128x128, components 3","md5":"79516e0e08ecd4f26f179e82549f2f89","sha1":"f6038347935fb667021cb58791368b43fffcc8f3","sha256":"97a3df4c61f939660a54cfbfb1ac77cc7939b88ea38d2574c324ec85e422ade7","sha512":"d439d49ee43be35e9a52984b8c20f3ca9dd2c85689db9d0ceb9208682409db3b80abd489030deb42664f4561a5ca98c665b86ed1508848d868ff667435f97821","ssdeep":"96:XmZEsqS7Wn26kKX9aufHJe9+0BzgrZqk+a2aenqhddfmHTD/mZU:XKUS95DufH89IrZpfdKua","tlshash":"2bd16d636f329f81d9faf8f8420ad817422cc8d7a927bf4b5b390955bd738b14b42065","first_seen":"2025-03-18T04:27:57.420628Z","last_seen":"2026-04-30T14:40:38.634567Z","times_seen":309,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/images/row-bgimage-2.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /images/row-bgimage-2.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 404\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":916,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"a67a9c82e69da136f98aa21844ecc435","sha1":"db8b6da904294972a958bb5e0d1168118d44e6e1","sha256":"1668d1a8c2369071c03a2cd383f8bc06893716c0febac1398a959a27d7321f51","sha512":"f99c2bfa41c9e22416a19b3140dad0b31afb9f768fc445512fc345c7428addf412b87b491357d3f455b31f0cca58cc1460a6da8f16f64bb7b791bd5fdbe91470","ssdeep":"","tlshash":"ff11ef6f04051bbe134282a2f514366cd0dfaf1a7fc26450d5a329b6aad4bcdc57e498","first_seen":"2026-04-30T10:31:50.196031Z","last_seen":"2026-04-30T10:35:31.678081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:06.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1777545066338\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: 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%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260427.08.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 906554935\r\nX-YouTube-Page-Label: youtube.embeds.web_20260427_08_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1777545063004\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C700%2C394\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 12275\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12275,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260427.08.00\",\"configInfo\":{\"appInstallData\":\"CObezM8GEL22rgUQvZmwBRDD3oATEJS20BwQkJTRHBCs9dAcEIv3zxwQrtbPHBCBzc4cEIeszhwQ9quwBRDklbAFEJ_PgBMQwonRHBC45M4cEMuj0RwQwY_QHBDa984cEJSD0BwQzN-uBRC-irAFEJ7QsAUQlP6wBRCskdEcEMbGzxwQi4_RHBC1pdEcEMz50BwQyPfPHBC-hNEcEPzbgBMQ_LLOHBD79tAcELnggBMQ8bTQHBDevM4cELyk0BwQmY2xBRDbz4ATEImwzhwQsP7QHBDYhbgiEPPegBMQjIfRHCpUQ0FNU09oVXgtWnEtRE1lVUVwVUNuQTc1RlhaUFdkMERoQS1DcnZBTE1xQ3NCQVBOX3dYTHR3YjdKcmJrQnAtSkRlcjVCcGVVQnN4Q21xVUdIUWM9MAA%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://nixotradex.org/\"}},\"events\":[{\"eventTimeMs\":1777545062780,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062785,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062790,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062790,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062791,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062792,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545063036,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545063038,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062350,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062267,\"latencyActionBaselined\":{\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062281,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062350,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062362,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062569,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062647,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062554,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062705,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062554,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062628,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062554,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062684,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062554,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062646,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545063044,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h3\",\"transportProtocol\":\"quic\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545062767,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545063047,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545063050,\"latencyActionInfo\":{\"serverTimeMs\":47,\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777545063111,\"screenCreated\":{\"csn\":\"7ZcIIaTp4548x1S4\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"Zi_zaZzlEbuChekP69OJ-Ag\"}}}},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1777545063112,\"latencyActionInfo\":{\"clientScreenNonce\":\"7ZcIIaTp4548x1S4\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1777545063112,\"screenCreated\":{\"csn\":\"ZcdqlI6mCrg6zCDh\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"7ZcIIaTp4548x1S4\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1777545063112,\"visualElementHidden\":{\"csn\":\"7ZcIIaTp4548x1S4\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1777545063112,\"latencyActionInfo\":{\"clientScreenNonce\":\"ZcdqlI6mCrg6zCDh\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1777545063113,\"visualElementAttached\":{\"csn\":\"ZcdqlI6mCrg6zCDh\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIvZWLsK-VlAMVXdhPCB24OB9zygEEncAaCg==\"}]},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1777545063115,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"28\"}},{\"eventTimeMs\":1777545063116,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"28\"}},{\"eventTimeMs\":1777545063154,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"0UODW4ZsYKl3i4_w\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"66\"}},{\"eventTimeMs\":1777545063157,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"69\"}},{\"eventTimeMs\":1777545063249,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"161\"}},{\"eventTimeMs\":1777545063250,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"162\"}},{\"eventTimeMs\":1777545063251,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"164\"}},{\"eventTimeMs\":1777545063257,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"169\"}},{\"eventTimeMs\":1777545063284,\"visualElementAttached\":{\"csn\":\"ZcdqlI6mCrg6zCDh\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"198\"}},{\"eventTimeMs\":1777545063285,\"visualElementShown\":{\"csn\":\"ZcdqlI6mCrg6zCDh\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"198\"}},{\"eventTimeMs\":1777545063342,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"255\"}},{\"eventTimeMs\":1777545063511,\"visualElementAttached\":{\"csn\":\"ZcdqlI6mCrg6zCDh\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"423\"}},{\"eventTimeMs\":1777545063511,\"visualElementShown\":{\"csn\":\"ZcdqlI6mCrg6zCDh\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"424\"}},{\"eventTimeMs\":1777545063511,\"visualElementAttached\":{\"csn\":\"ZcdqlI6mCrg6zCDh\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"424\"}},{\"eventTimeMs\":1777545063512,\"visualElementShown\":{\"csn\":\"ZcdqlI6mCrg6zCDh\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"424\"}},{\"eventTimeMs\":1777545063512,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"542GEEg7xgVCNyxD\",\"clientScreenNonce\":\"7ZcIIaTp4548x1S4\"},\"context\":{\"lastActivityMs\":\"425\"}},{\"eventTimeMs\":1777545063512,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"542GEEg7xgVCNyxD\",\"clientScreenNonce\":\"ZcdqlI6mCrg6zCDh\"},\"context\":{\"lastActivityMs\":\"425\"}},{\"eventTimeMs\":1777545063512,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"425\"}},{\"eventTimeMs\":1777545063512,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"425\"}},{\"eventTimeMs\":1777545063548,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"462\"}},{\"eventTimeMs\":1777545064142,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFw==\"},\"context\":{\"lastActivityMs\":\"1055\"}},{\"eventTimeMs\":1777545064150,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"1063\"}},{\"eventTimeMs\":1777545064336,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"1248\"}},{\"eventTimeMs\":1777545064337,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"1249\"}},{\"eventTimeMs\":1777545064338,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"1251\"}},{\"eventTimeMs\":1777545064512,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"sYjeCKIKeItiHSPe\"},\"context\":{\"lastActivityMs\":\"1424\"}},{\"eventTimeMs\":1777545065151,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAOCaQA==\"},\"context\":{\"lastActivityMs\":\"2064\"}},{\"eventTimeMs\":1777545065152,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"2065\"}},{\"eventTimeMs\":1777545065152,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAAFFAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgFvCgYKBGFHSWYSCREAAAAAAIiIQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAAAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAAAA\"},\"context\":{\"lastActivityMs\":\"2065\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"Zi_zaZzlEbuChekP69OJ-Ag\",\"clientCounter\":\"24940\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Thu, 30 Apr 2026 10:31:06 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-30T14:36:51.806019Z","times_seen":242496,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/slick/slick-theme.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/slick/slick-theme.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"14f2-65e06905-bc18826fea79fcb4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1165\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5362,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5d5467913e6993e7ce475116c74587a9","sha1":"7a9aee7ad36f6eba9a213967b052cb807a02c7a2","sha256":"e69bdf0d68f559df15d9fbddb2b0346b78895aa6e06de6c87236b28d5e2be5ae","sha512":"025c4c8e04461f15b402c00fad86fcd56e71bcdf856471b9036a4a50bc5fc73fa8a57a45287fb5683df6932bf990b74b76c8f9044a6830c53b085bca0ea18a79","ssdeep":"96:+V15CEXdql+MeDpaX806FjAf8YwkKbZk5PueS/Fj93:SP3XdcTGp6804Af8YwkKbZk5Pu1l93","tlshash":"5ab113aca506e1c6163388803fa30755eb9b30431f110eacffa413545fbe0ac5ad9b9d","first_seen":"2023-05-11T19:38:54Z","last_seen":"2026-04-30T14:40:38.619982Z","times_seen":380,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/jquery.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"1538f-65e06905-603881fdd46aaa95;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29664\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-30T14:38:22.572173Z","times_seen":124301,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/css/animate.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/css/animate.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"13053-65e06905-3f86220820cda74e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4459\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77907,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"91cc40989e5e96e8d6bddc0f19598441","sha1":"77b5378a2b4bfc120e52782dd869aeab7efe2fd4","sha256":"6b6b686ecaa56e02ec5aced95541a03f922f599b31f1b4cd429ceca824a6e669","sha512":"90750a22634147d99cc10d6ee1120bb6c889982eaee77f5b82445aa5f1ab6f05db90fc5f6a9933017bdd1a7ad3bb76e518d5c73c25f4925ae513bcc0661afe8c","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLcec:oNuKuWg9unuLuJu9KIZQMcLcec","tlshash":"80732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T10:43:58Z","last_seen":"2026-04-30T14:40:38.625133Z","times_seen":2737,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 04:30:42 GMT","end":"Wed, 22 Jul 2026 05:30:36 GMT"},"fingerprint":{"sha1":"13:A8:C3:10:C1:19:3F:93:6B:0E:8F:1F:8A:5E:F0:D5:AA:B3:0E:B5","sha256":"9F:52:1F:FC:F1:4E:62:ED:CA:52:A1:90:90:18:0D:F9:2E:FD:64:67:3F:07:CC:25:3A:A1:C2:02:E0:AF:E4:FB"}}},"request":{"raw":"GET /releases/v5.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74320\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"3638e62ea50e6f5859b6a15276c25c87\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:51 GMT\r\nvary: Origin\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7lmziXqIx4v5UioB9vkZ9sFlFh%2Faz7FGaRAn3RnoW%2FLkAVzl0qto%2B5Zu9pt7o6KJEbiRugVfiXEKSd7isZZN9ILtDzdnQXM7XZlgd64qT%2ByO%2BXkn5AjuKRh1EoGwR83eR3TgcDNs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: 9f45dfdeeeeb568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74320, version 329.30998","md5":"3638e62ea50e6f5859b6a15276c25c87","sha1":"f5aa1a463e223a294a42b314e1c63a614d594ec0","sha256":"9e6bd5b2d75bba485d2337d020750744983a3521ec697adfe21b29ee4f14f6a9","sha512":"0c7c4817722acaefe37770ab2f30b658065670044a4d73bea7a441780b3d40bc309d8c9593473b69c3521e4f8c40d1e0b8fdeef1619be26365db0ebdca5f5575","ssdeep":"1536:T9XBTV3zaFDGMq0gGmrbhafkPovybyJ0HgYEWdOXmkKHJaIvSI:118iMqmmxarybNHg59KHBF","tlshash":"bc7312c35adf8912c5633b6c3d8b41362f2469549a652e4275ef0deeb6f17b82f88011","first_seen":"2023-04-10T15:09:54Z","last_seen":"2026-04-30T14:40:38.619526Z","times_seen":7009,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/738/large/CG_EOS_Icon.png?1731705232","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/738/large/CG_EOS_Icon.png?1731705232 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 24537\r\nx-amz-id-2: LdaA15tCyQPvKqiQDElDrkDgoCM8OilwZaPVfIWNlsEuSo4r/73V3tTwBU6VoUd5ar1WrJCi3rirABbRc28ScoB/ZERKAJIO\r\nx-amz-request-id: 3Y1QWXV2CXJ4S57S\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 15 Nov 2024 21:13:55 GMT\r\netag: \"e57d503851189addb2768cf2c838a64d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1WzZRILTVssxSmYKEl54vLexpATuWM8L\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ku%2FCrjhQmB7ujvXYpjjpGT%2FDKDXUBml1WZx6GT6Mximh%2BI6sjTSUpBLF72GfafE4abkVseVZ9AluqmH5Tb3dE7U0fmbvYF58JIy%2FDyIvfk5zH4W%2BeYh9%2FFeyMSv6qB2oMPLD1v%2FUUQ%2FDgio6\"}]}\r\ncf-ray: 9f45dfe1db17a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"e57d503851189addb2768cf2c838a64d","sha1":"9e549bcc32f84550061ad391348c883f900f208c","sha256":"16bd234f9403281e3bcf1eaa6d291b47c6b051926b942e7790e9ca114bcaf511","sha512":"a2b016e9c4b77bee3c47f4d47b3377aa178fa35e961eb4abcdcf7579bf9c20a0557a350858a7e99760d66f20c12f222352be0ae9482542785d56a2b512d0c587","ssdeep":"384:IrUUKAlDpY+iqWepCiwr4bAoMKJTGa+YQAi9bUxAivP5z9SHb2hhMlRepSTtIvQq:IRPfTWeLwbOr+Yqbr+z92bp5+oq","tlshash":"85b2e053bfa045652f998c7090bbc24637f78f81d55e0e8acabd192c7fa72c451d720a","first_seen":"2024-11-25T11:23:20.548553Z","last_seen":"2026-04-30T14:40:38.635635Z","times_seen":734,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":82,"dns":19,"connect":1,"send":0,"wait":486,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:03.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 00:25:39 GMT","end":"Fri, 17 Jul 2026 01:25:37 GMT"},"fingerprint":{"sha1":"6E:87:A7:FF:BF:A2:44:B4:75:CD:21:AB:C1:4F:AB:42:38:40:05:E2","sha256":"B5:D4:1B:C3:50:BC:E6:F1:45:90:A6:17:BF:F6:1C:A7:A5:BD:E9:46:9A:07:E7:A5:F9:99:E8:73:27:BC:89:1B"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nixotradex.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 07:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"698ecfa4-6beb9\"\r\nexpires: Thu, 30 Apr 2026 11:22:45 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 7698\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r0uLeGczXijzpmKXpI1ZnNZ7c%2F4DI0J4bKzGLDoyFLTZU9vthxpMVr%2FZsbCArouNd0ubHh%2FRXLIWiCAoOIVp8qKmAcq5SV%2FlueQkzCwNp1QClWZFd2ERWfo3rRQqDOdw3RivnWg%3D\"}]}\r\ncf-ray: 9f45dfe4ea9856a5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-04-30T10:35:34.62644Z","times_seen":1201,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /embed/x7msE3tx8QI HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script', base-uri 'self';object-src 'none';script-src 'nonce-dtq_ZomnP-3T41pU08_waA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=18.YT=xz82YKwML3ldTNywDORs8g1UGS_Mv0wGmX-r0Tm40gaFTFoe-a6k1CL5tni-SoOujqmuk2JTB2RuzQWZO6uTgLxek6BFQ8pmRaZRNL9fwFPTIiKhZi0bmxAjZ4udjdFbalay3WxjldJIsBXg-d9ZX90xY_rA3BoSADbkCRUlr4h_oy14ybcdRajQ2n3yh4yJ-FrJ16zA5tvDxqoe6hk54QHmFqljcPA-MLLM62V87OSJ3hW8JGH5QbZ1hKpmK4gMSUGfU1jcT0iVnkqNBW2m2mKCgO5dbUblJGYlJmkhXPA0NX7S9uQzWOtp1H6mv3oZajY8lr1LcBS_I1S2VNUKXg; expires=Tue, 27-Oct-2026 10:31:02 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=gStlFGdfVSQ; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Fri, 04-Aug-2023 10:31:02 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=_glD1z6ylS4; Domain=.youtube.com; Expires=Tue, 27-Oct-2026 10:31:02 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgag%3D%3D; Domain=.youtube.com; Expires=Tue, 27-Oct-2026 10:31:02 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CM2tjPqSyu380gEQyLmKsK-VlAMYyLmKsK-VlAM%3D; Domain=youtube.com; Expires=Tue, 27-Oct-2026 10:31:02 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142586,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"d8262ce14d0381bca831b21bd646ba43","sha1":"bc8b3a24b9f0703a4fd13e5aad206822f76dbc0b","sha256":"60a07714aecae21368f0315772cd76b806d7b7ad38b7b91b0eb60bdfc9a4c083","sha512":"a53e29679e45d4b379dac37fec4634e17bfc41a6d078954990874af34d21a0f51460a5e49c0631db4547c74b0d33f5d9901a203136eb237ed9dd0c4480b1bde0","ssdeep":"1536:R0iWOmoyxitwvPhHU+jxdDozAXGXd4jU2wgE+lp9Jy+F6MRXGJJH4wEK4l:LFy/0+jxdDozAXGXv2wgpJdIHPPK","tlshash":"9fd31a240858a876c4939807edbaff3e5cf8023a47c8956ebdbbd75c05dc6610eaf416","first_seen":"2026-04-30T10:31:50.207594Z","last_seen":"2026-04-30T10:31:50.207594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":69,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 04:30:42 GMT","end":"Wed, 22 Jul 2026 05:30:36 GMT"},"fingerprint":{"sha1":"13:A8:C3:10:C1:19:3F:93:6B:0E:8F:1F:8A:5E:F0:D5:AA:B3:0E:B5","sha256":"9F:52:1F:FC:F1:4E:62:ED:CA:52:A1:90:90:18:0D:F9:2E:FD:64:67:3F:07:CC:25:3A:A1:C2:02:E0:AF:E4:FB"}}},"request":{"raw":"GET /releases/v5.7.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 22 Sep 2023 01:45:49 GMT\r\nvary: Origin\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bmHdsp38MPwYnkTKWHIYkDR3Dnzt%2Bk4RXV392lU3aqQL%2BmohULBqcXd45YK0FQVGBpDHNgVWpDK3IDouGMjJhSqlRNcsnhdw7occ35EQASb6ieW0qDvyQJCt%2B2FIf4rkx4SXwK6\"}]}\r\netag: W/\"7b1d7f457d056ace7b230b587b9f3753\"\r\ncontent-encoding: br\r\ncf-ray: 9f45dfdb7b7a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-04-30T14:40:38.617029Z","times_seen":13177,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":1,"dns":22,"connect":1,"send":0,"wait":108,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/css/main.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"9a16-65e06905-46fd2d056d15ff;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7262\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39446,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3e8b5a8c85460cffe614029b6bfd67e5","sha1":"1e67df76af6402c86c76818555c3871aca4c16b5","sha256":"f208eefcb0c1eb9704eadeb8e5abe4eb720bb31569fe6713e1cd3743171227a7","sha512":"79499baa50afa59a08597b6a31a1c7e7f805b6db2b9b8ac6101d86f9ca67acb4118a7d3bfe90c95b16af02b8ac5589bdbb64a11f94f5158de93dd9a2041b3f03","ssdeep":"192:C/JTy7m+XgmQ4DFcDwDFcDWDFdDlXds3I9hoa2TAsD6lyHSXmtGsd0+NUCcHNGXt:BaaYjDBjhUCNQ1jzecPGX2fHd5Xedb","tlshash":"54034f9cda1621037237dab867e20756fb6400a3cb02016cbbddb2558ff45a88676edd","first_seen":"2025-04-22T02:01:38.824126Z","last_seen":"2026-04-30T10:36:18.952554Z","times_seen":115,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/crypto-investment-sm.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/crypto-investment-sm.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"16fbc-65e06905-8ac596720a6ddb33;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 94140\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94140,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"67019c83e967a0e72bf006b3c202f439","sha1":"01d41a39c437ea54138820ffaaab58bb86e21bf3","sha256":"d9319dba8677abd747aa26cde0db12276501d81b30cad9e175329c07fd3275bc","sha512":"665129cbc534ddaadd9510bbfe1690d485d85073b72e4667cf721b4d76f8ca317ce5581e92d226b9f078cc5be1cdbe421c008b16bd1af0c20cdd33d2092491f5","ssdeep":"1536:xiM96fkCGRm49r8NLZo7HxbE9QXjiv3cjSr6KgRTry8iycEymo++o+YZSRekfcwB:E+mk3R5r8NLZAZXTM9OtTry8Hymo++Sk","tlshash":"f7930250ea6b896050ccc536a8812bacdb265ab7a7d6350f38edf7cde1484f42937d06","first_seen":"2025-03-18T04:27:57.417698Z","last_seen":"2026-04-30T14:40:38.619023Z","times_seen":353,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/stock-investment-sm.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/stock-investment-sm.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"2dbb6-65e06905-9af16444d934c14d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 187318\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":187318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"fc3e76cae0486fe2182e9580e7870ff0","sha1":"8b0885866f9dc0e6c22b63835c1be191ca0fc918","sha256":"26f8d247ea6b71c8e25a3dd239601cd0e4689f69cbec277e8e8d94987b7bf8d1","sha512":"8b7527cf0d06984371195bff3b27aae5c249bb7e83b72fd657a6a66aaa1a55932a6eb7eaf83b64895ded0ddff7748894360f3dfbf2fdd1245e03be804982744a","ssdeep":"3072:Q16tfXP9p8hwE9OwLVq8bOd6bDhD5ZLiB27bJWJ71aXaZktAO8tc:QufPLW9BtO6ZLyaEp1aUe","tlshash":"e20423408f34a8ce8aff9375bc26c202d258b9994e20feb7f02485e57cc59ee2547e44","first_seen":"2025-03-18T04:27:57.412829Z","last_seen":"2026-04-30T14:40:38.618058Z","times_seen":354,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:35:17.446879Z","times_seen":14427018,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":63,"dns":0,"connect":9,"send":0,"wait":111,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:05.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 10:31:05 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69de0593-1396\"\r\nexpires: Wed, 20 May 2026 10:29:00 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-20T10:29:00+00:00\r\nx-node: m9p-up-gc29\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-30T14:53:57.2838Z","times_seen":14247,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/themify/themify-icons.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/themify/themify-icons.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"4599-65e06905-4e7009a9e5899b04;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2706\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17817,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8550d4f5955437a51f49a5abff88a7a4","sha1":"e360e1412a31c69ed2188a9816d394478895c106","sha256":"9c66fe2fab3a1d65b14b92a20d4c817ed481d74846a8a5f33d3616200b973602","sha512":"c1eb60c4cf0c1a51bc2172d549b7d735304572c6d82e61675d6e3feb9ee74fe354eaa83da5d8cea4ab16b471879314e54cc21e4ad1ddcfc990852fe28677752d","ssdeep":"192:TjlG8SWxB5iQYxil3EguJ+JvZ247F52WM:s8NbAlMJdFg","tlshash":"f182d39495bf1ca41319e0c1734bf215bb0db6aa9a450c5ce293ff4cafd3a1199c2adc","first_seen":"2025-03-18T04:27:57.388175Z","last_seen":"2026-04-30T14:40:38.616041Z","times_seen":358,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/slick/slick.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/slick/slick.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"726-65e06905-1d6abf8e385c8702;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 478\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"68a281f599d6a4fa5e8cab54bc5f59fe","sha1":"515cb38cbd76ebee91d05f7544758f4eceaac07e","sha256":"1b786863757c336ef237105e2560e02e2e54b90781ecafb63732662caffe4cbb","sha512":"e001ba8f09719604413c08ad5aa641cc9a5fe286c2d049fa0e86e12972f3d0a72e2cbbb9322734766aaad2fd892ba98c8cc5c91a290da36dd9f36995fe861857","ssdeep":"","tlshash":"2e3119dc0152c5d68b3384444fd38649eeefa0930c241698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-13T11:05:16Z","last_seen":"2026-04-30T14:40:38.629454Z","times_seen":613,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/bootstrap.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"d9df-65e06905-aa42759f848fb716;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 13901\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55775,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55494)","md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T15:00:27.647574Z","times_seen":3866,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/cannabis-legalised.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/cannabis-legalised.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"e3448-65e06905-4ea103bd1ad3abeb;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 930888\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":930888,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 3421x2280, components 3","md5":"f55e2332080c6ca5b67439ab15811e30","sha1":"8a61a7af5f8d96d2bd6af1f43f13f672f608f510","sha256":"ed936bcb16b618378dc87b1b26af543bbc3664ac748d2a50996e4dc73aa63338","sha512":"a92172a0bd59b7681686640bbbe19b15a1ae503fb29b3a59ac8b0fb604d84a8ea759e5d42a7868d7ed12b3b38a0892380d57843fe673552845e39a9b8dd3f6b9","ssdeep":"24576:DJY81E/P6hLJIgGKclCawU7UUXngziBeDsUp6tGkHXq:DSfAJIgRaw+3gxp6HHa","tlshash":"2b1533747e46cde3d2e92a823059061c736efdb6bd1b5a08362640d166c3587fe9133e","first_seen":"2025-03-18T04:27:57.403157Z","last_seen":"2026-04-30T14:40:38.614545Z","times_seen":350,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Apr 2026 10:31:02 GMT\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23175,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da021909beab0ff8237ca3132d715150","sha1":"cb4dfe7ecbaffe34c9c0f7264a20376fea1c3c02","sha256":"c598de7a97f99eca9a992b31e0ae65ebb1c1744981af3d577c965041fcff3594","sha512":"2ce8f240884297d891fb4e24220c80e23067b7d9185aa514deeaa9b04269f061f1a0cf806096ab311b78ad83467682e96ddcf9d394fb0e9746c4bb7ce702ace7","ssdeep":"384:cO3B3u3UOCZVOrkOOc/3O9K4O+VZO3wyOYbbOJW8v9AeUtGv4RK0:ddeU9Al","tlshash":"89a2bc66142fa580aa472ce337df3d31df4fb194b450887a6ffd2898ac56c22636630c","first_seen":"2025-09-17T09:11:46.441038Z","last_seen":"2026-04-30T14:40:38.632222Z","times_seen":406,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":59,"dns":1,"connect":8,"send":0,"wait":23,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/slick/ajax-loader.gif","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/slick/ajax-loader.gif HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/temp/custom/slick/slick-theme.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"1052-65e06905-9d21990d6c6b93a8;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4178\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-04-30T14:45:03.039421Z","times_seen":36831,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:02.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 18:54:05 GMT\r\nexpires: Thu, 29 Apr 2027 18:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56217\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-30T14:35:46.852168Z","times_seen":775299,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/x7msE3tx8QI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYihZMA8=\u0026rs=AOn4CLBe2bWn1to_h8BqX8LbE70rVtsPxA","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.251.142.246","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:03.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:07 GMT","end":"Mon, 22 Jun 2026 08:35:06 GMT"},"fingerprint":{"sha1":"64:32:BA:C8:B0:7B:67:76:CB:14:03:AE:5A:F4:D0:AA:74:5F:B7:B6","sha256":"BA:87:93:A7:52:F7:A0:45:42:9A:34:28:D1:11:56:C7:5D:C4:5C:4B:F3:3E:3B:E7:8E:7F:C7:C9:18:B4:5D:66"}}},"request":{"raw":"GET /vi/x7msE3tx8QI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYihZMA8=\u0026rs=AOn4CLBe2bWn1to_h8BqX8LbE70rVtsPxA HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72552\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\nexpires: Thu, 30 Apr 2026 12:31:03 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1468369451\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"67ad8b17c1d09a512ab2464dead51475","sha1":"9f1b0691f604daf09a5bec883f3cc50f48255703","sha256":"5c9e1bd8ce2983b1e05022a49c97f7b2c7aeb15886748f09531e245c365d0202","sha512":"4adfd4db25088f632c2a6a9944b6a444f75da78a0145625cc2001a705b85bfef6e5626166d23a4adb46cc247fa6ca73cba4a64234b5750307bf08cf0159a920b","ssdeep":"1536:FL4c1otLDxTqKeEEbORzuKGlEcnxOicFGUKe+HJsZ1LoifX5uQ:yc1oh1TqKeEEapuKGNf8GSmJsTLdfpj","tlshash":"cc63f1118f97e04bc92fc37194fb2996f87637169ce960ec310314295882b3bf95e729","first_seen":"2025-07-13T07:15:07.237691Z","last_seen":"2026-04-30T14:40:38.62203Z","times_seen":356,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":96,"dns":1,"connect":21,"send":0,"wait":48,"receive":38,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/about.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/about.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"aac0-65e06905-7a4b4a8c816aab18;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 43712\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 570x590, components 3","md5":"6662d34c4f26f1f26586d8b0718889cc","sha1":"1ca95815bd8c654a8365e6139c7bfc3c7e0af298","sha256":"48fb855c939d83924f83ac5349c8ef9d349ed88299720755a5c4870c5e6374bd","sha512":"d9996ba23333a2b4452837d7875cb6df0203d263d1d44c16afca1ea126d398cdd1b3d3c37ccc25e402bb3022359d0669ecd0adde0fcf379d4ed0d61acb260f3b","ssdeep":"768:TmNXFtG2SzAhaf7oHK1sNolxl6K7CMV55gRWDwyCe+dPLiHnGYRhCeN1:TU1tG2SzAWkKXHl6K7LV0jH0n3RB","tlshash":"2e13f10085136a734b169cf6a32bc469d44affd693b092ce9b30c0692484fc1db976f7","first_seen":"2024-08-19T16:43:15.382088Z","last_seen":"2026-04-30T14:40:38.63114Z","times_seen":339,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/real-estate-investment-sm.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/real-estate-investment-sm.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"19432-65e06905-b92d676a05eb47f5;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 103474\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"513853b7ee43c65811c9944d1b7f955e","sha1":"2b0031baa444165d350c3350ba133b5acb870a8a","sha256":"069e73aa63a77e4b8abec49c7c4e5fa241c8de1a364932dfb0106458ea29c88d","sha512":"974e70195aee421039f2ace2049356b5a1f7f17af9c5eecc0d66440e06f8579e305ae91775b5a9ee7b40a5ff475a4e86828df305fde5ee1f4000f29308f633c4","ssdeep":"1536:QFIkprDLn7pNoLfhuJgHeC+NkV69orEmTxrQt98jGnxZuV2wWHpc9+leU06GMA0M:QukprbpkuJgHet9rtqjQUre26PQZd","tlshash":"d3a312704694f447c86e6ffd1844db2cd163372c7022a078b9af96d26a486e61c1f57f","first_seen":"2025-03-18T04:27:57.409907Z","last_seen":"2026-04-30T14:40:38.631639Z","times_seen":351,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/footer-bg.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/footer-bg.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"4fad-65e06905-1cfb349d2a5a556a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 20397\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20397,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x629, components 3","md5":"173006becf1f9024a75cbf6549d11bcd","sha1":"231f4956f43af8bd4763c626c83b94093d03d791","sha256":"a806702cc490d657e574c9a2eb2ff002abe0e8820c3a170d4883857fd5de23cb","sha512":"0016ba9f03659fe4aad0da2e1db61f0e5d809e254b3fe9beaa5680069802eb8de19effccd00fc7d0fa199b69b8dd11a16e4173a44481a09a843fdf6346686e7d","ssdeep":"384:ja64Ahf6E4e/50OI8e9saLroK5lmtpdKGRlG:jadAhf6E405hpeHLrN5grbO","tlshash":"2e924c67ff06d746c9989330c4fb17687fb600bde690564aa6b8083a1cde3467d8c1e1","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-04-30T14:40:38.637256Z","times_seen":390,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.cl-pGNCjxMo.L.F4.O/am=AAAABA/d=0/br=1/rs=AGKMywGbv4XWNvRco55OOzzj2msVMlwW-w","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:02.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.cl-pGNCjxMo.L.F4.O/am=AAAABA/d=0/br=1/rs=AGKMywGbv4XWNvRco55OOzzj2msVMlwW-w HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 44232\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Apr 2026 12:59:39 GMT\r\nexpires: Wed, 28 Apr 2027 12:59:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 28 Apr 2026 01:09:18 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 163883\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":362066,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (57519)","md5":"ee77df1d4f4346071b7de17a9376a733","sha1":"16497e1f41e17b2eb325db14345d40a562861a86","sha256":"ad23efe9020da32c85027a9d6a1992d42c6528960e25a7cdf7564f7bf5988558","sha512":"510df727326d855d7ffd7ffc0c83dc280e37fd34bbf2d53955541cac638d01e5899ae7df1d58feb2daab13ae85cf321a5ed3b7e470e4a9980b9ed06a47f727e2","ssdeep":"6144:TpEp341Z+zlrEBtLzum3gszR8ri24typauQz0yeSE4dk+46HnhF4xdXcXaGlaxAZ:Q41Z+zlrEBtLzum3gszR8ri24typauQz","tlshash":"0674b97355121228f0179671fbe1fe4ab526c117c25a3aafe442be2cc6df5e12e2360d","first_seen":"2026-04-28T15:07:20.277911Z","last_seen":"2026-04-30T14:50:42.92657Z","times_seen":1377,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/flaticon/flaticon.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/flaticon/flaticon.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"c25-65e06905-6a1e32d8ea28cc7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 599\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea599ea4d42d8857576411a32ca71ad1","sha1":"9a3f3981a4d5d504c8dd78eae45e57d047ba3ed5","sha256":"5392f32016b9330f52883b8c33216665f1d5704d7824690ffc905842391568c1","sha512":"5df631c177a112132ae79305062ccc47b0f80c1d9723d16962bab79a1c3578173a8204c1361068e95eeb3a9ffc9f30356f15858fc2957280a58504ba5c9cd90b","ssdeep":"","tlshash":"1b51f554867e4040e7559b881f9f7780a768b02fcdc49c09b2059f6cfee19ad83c1aec","first_seen":"2025-04-28T01:39:11.855739Z","last_seen":"2026-04-30T14:40:38.603811Z","times_seen":355,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/44081942/cc-powered-by-light-mode.png?width=185","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 16:47:22 GMT","end":"Wed, 22 Jul 2026 17:47:13 GMT"},"fingerprint":{"sha1":"2E:DD:BD:BE:41:8E:5D:61:D5:7D:F5:38:C2:AE:75:A4:D0:05:93:C6","sha256":"91:97:69:F7:C0:9F:1F:CB:DF:8D:1A:88:BB:E7:BA:82:64:A0:2C:46:5D:B8:07:51:0A:92:BE:1F:F4:B0:DD:F2"}}},"request":{"raw":"GET /media/44081942/cc-powered-by-light-mode.png?width=185 HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 7191\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 30 Apr 2027 10:31:02 GMT\r\nlast-modified: Thu, 19 Jun 2025 17:21:30 GMT\r\naccept-ranges: bytes\r\netag: \"1ab3ab983ee1db1:0\"\r\nvary: Accept-Encoding\r\nimageprocessedby: ImageProcessor/2.5.2.0 - ImageProcessor.Web/4.8.2.0\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nage: 1279116\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9f45dfe36b05568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 33, 8-bit/color RGBA, non-interlaced","md5":"93060be98c362aa037ebce82d04b28b4","sha1":"b8139f5ef08991d9486df2d43d29ec58aa411d51","sha256":"35736416592a885016d621e54e517b3406031a4da520bba8e553db054a596071","sha512":"1820fdd4a926f450baf4d0ba36337f83dbf2354d506bf829a8aafcca706068467b8746b4504d8959e4231a6cdf6bb46dbb9e4345923c0a3a7bb1cd303d165cf5","ssdeep":"192:q4oRi9cyvSC+6uqYXk7zs+EWKv1cISjiDdxuuwpiE:T0i6ynHG+EWKvFwqPzwwE","tlshash":"99e19ef30c480fe6950492c61cc2a97c1db8479e51f74bbdbabce85f9424421de6e292","first_seen":"2024-05-16T05:45:05Z","last_seen":"2026-04-30T14:40:38.637778Z","times_seen":430,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":50,"dns":24,"connect":1,"send":0,"wait":9,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/css/bootstrap.min.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"2565e-65e06905-fc7ada91532b20b7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 20694\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-04-30T14:40:38.62888Z","times_seen":3829,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 14:58:03 GMT","end":"Sun, 26 Jul 2026 14:58:02 GMT"},"fingerprint":{"sha1":"28:01:15:B1:F6:14:ED:7E:5A:C4:36:40:D4:51:0A:F7:BD:16:E9:31","sha256":"4D:F0:56:5E:65:97:FB:02:03:94:69:9B:31:B0:A5:F4:1D:35:D8:8D:41:A5:6A:9B:C8:E7:5D:A3:87:81:E0:95"}}},"request":{"raw":"GET /coingecko-coin-price-marquee-widget.js HTTP/1.1\r\nHost: widgets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: x78/JLvR0bZ8v385JLO+OmwFDvOLrbVxif7AM9NbenNsuLllxm0Di+XJXChU5Chj5hfjJVIy3sw=\r\nx-amz-request-id: TNSJJZSVD7XM5KVB\r\nx-amz-replication-status: FAILED\r\nlast-modified: Mon, 07 Apr 2025 09:46:41 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8IU8gJZQXRiGC6A_MmJu74Yaw9wjwSfp\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 98222\r\nexpires: Fri, 01 May 2026 10:31:01 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"73cffa172df581e1417b3380bf189952\"\r\ncontent-encoding: br\r\ncf-ray: 9f45dfdb996523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":230964,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36129)","md5":"73cffa172df581e1417b3380bf189952","sha1":"c14dc8dfcedda14dfb6202ae9e0141422ea39bd4","sha256":"789cebe4be3c4e1098f04b45f09e113fbb80d7dea01b9c8a5b1b9a0a1af14b44","sha512":"294775493517fff0e586d24ae8bd482c679ff15b8a40519285040ca4eef3f508b967d5b84b2c41021e731da5c08c83093bf171b0abd7d9b7de88a32ad9f5e97e","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodP5rUzpI4Oz:XYBctCo254Oz","tlshash":"e234198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","first_seen":"2025-04-07T11:07:41.7631Z","last_seen":"2026-04-30T14:40:38.639832Z","times_seen":672,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":19,"connect":1,"send":0,"wait":16,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/slider-mainbg-002.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/slider-mainbg-002.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"2684a-65e06905-fd36cab98de8a65a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 157770\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":157770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x730, components 3","md5":"ef58360d086e5cde10e81f53016f0721","sha1":"f854b33628d8f08c140b3eaf1512149c786f3ae3","sha256":"791bf0838f41d820f29c54c4157fb877eed9391ee4c9fbe5c740bc0aaa9fa12c","sha512":"eed48f42449ea66dad81a9c18d8fe4da21553f075442540c98fab98306e2971cdb0435bc483bf9e69d1cc9343c84e20169397ab5130d664ee98eb28cc86dee48","ssdeep":"3072:rZnn76sllzr98fzNYVdtvu3jNBXpeQKNr9QW63RBJVTpNJ6RxsfctBJTpgFy/:lnn76sD98fziVmznIpQjH7bctBHOy/","tlshash":"30f3123928f4494bce964ff60d66d6976eb24f20e71651c820ff263137820e49a213fb","first_seen":"2025-03-18T04:27:57.413662Z","last_seen":"2026-04-30T14:40:38.630583Z","times_seen":291,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kBo8UDI-1M0wlSfdzyIEkpwTM29hr-8mTYCxCmuA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kBo8UDI-1M0wlSfdzyIEkpwTM29hr-8mTYCxCmuA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 16:19:46 GMT\r\nexpires: Fri, 23 Apr 2027 16:19:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583876\r\nlast-modified: Mon, 08 Sep 2025 17:57:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39156, version 1.0","md5":"b590eac708ab31938a2b67ab7805bd8b","sha1":"55ba8f2b88b65a56f00108ee08200f32d5b26b84","sha256":"3d109f97a71d3d3d04d16e5c4b95be8f89146a55ebbed239b90f5a8c5d4f437a","sha512":"7b7458b8aeff6ca9978e97015961de788d561b706c59a7d9b5929ec660b14deb64083d970a8b09ab6a0fa608a0cc8ba4fa999ff7081c8f9803b06ecbc4f50c33","ssdeep":"768:HxFN+MkgnkudzCtNe1ck1NToNiADfLa2UFIUa7J6kkOlWiRbM8pQV:RX+MkgkUzcNswYCfL5UVaxkIdy","tlshash":"7e03012bc3f45d8f2f32c674e1801943e9ab4a14ce1af868ac77c97506f9730d19b584","first_seen":"2025-06-14T03:24:43.788943Z","last_seen":"2026-04-30T14:40:38.606047Z","times_seen":918,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:35:17.446879Z","times_seen":14427018,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 30 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7706\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T14:40:38.60459Z","times_seen":6163,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":243,"dns":1,"connect":22,"send":0,"wait":10,"receive":1,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 30 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7706\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T14:40:38.60459Z","times_seen":6163,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/large/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/1/large/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 12242\r\nx-amz-id-2: nx0KvfiqGvDw4MnJemf5dwEAuPu0VQzNco/YptjhKVwnaQct2dk5hj78zsbVfR2mBa8+7ZTq6So=\r\nx-amz-request-id: F556GJ1MTFPEXH9P\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"565e8c524f6da22928811f836d0b92a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K_Yd_oAsiQpaEoTt9rotaTCh6C_AUMdt\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3565\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BbbMqMhnw4kew6t2YYnnze240MOntZQn8InryatPlFZlhzbjiyPiRytxlIMyLURJsiQMvmOBRXGaax%2FbkLDeHehi4IheYkeXmnzYNP9fuxRpKA0n9mwfabJ8bOV7j1Lp%2BtMcPmgQQs%2FF3jVC\"}]}\r\ncf-ray: 9f45dfe1cae2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"565e8c524f6da22928811f836d0b92a2","sha1":"c52a8b6052273f04ffe097517461948beb849d3b","sha256":"1eb4e75d64a76a5d1fba301715ae227c683b34e8f75291670cdf7ae2a59de86f","sha512":"eaec675e23843f9fbe93edf354d54bd9b35001daa17b2345f6193e004035f1d16e0f5fdd933826a0dfb2e58e803174adf0cffdedba3ed561b1f1f528b15f4263","ssdeep":"192:CcG4VfIT9czHUiIxaA0BOlAD6sXLsU9Hogsr/ncqUd/gaPQ8SB+Dfd4rfMst/C0b:1G4VfIOExaA0Bz6aLmncqqoFBdLMoC0","tlshash":"1a42c005aae317c9cfa9803311a524136489c3800e65e8e6b1d4dc7cee9eb096fb37e5","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T15:02:15.776496Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":81,"dns":22,"connect":1,"send":0,"wait":5,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0980151a/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-30T10:31:02.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/player/0980151a/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 446538\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 07:38:51 GMT\r\nexpires: Tue, 27 Apr 2027 07:38:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 04:19:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 269531\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1493134,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (879)","md5":"d6949562aab26c98fdd006c301ef790b","sha1":"4aa427d6727d119893b5ccb0ab88de2cfd078312","sha256":"4080a882080bdea5ebb1263356b2869408ffdad889fa7bc7b7f0e3fbbac25aa8","sha512":"dda95e3aff1f620b6eedfcc92f3e1a7b0dd486886c85705c747cf00bf2091f5e9c626c901e01cd434ab02e61534edd1b65f2b23fce727a25b97aade8a79063c2","ssdeep":"12288:Gz0uLH/i1ngqO9Cb/92aPhLU9LThCHcBedOQIT5FcTFnQQrd9jLwY3+CyuM:JNggb92I8CHnkt5OTFnQQrdRVbyuM","tlshash":"74254bd93296b47743a3f0e8186f010af67a1905b088d45cb65edafa1cb6847817ff78","first_seen":"2026-04-27T07:46:14.204739Z","last_seen":"2026-04-30T14:36:51.874818Z","times_seen":653,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-30","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/0980151a/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/flags.png","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:03.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/flags.png HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/temp/custom/css/intlTelInput.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"101a8-65e06905-5cd4765fb2e3aa3f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 65960\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5630 x 15, 8-bit/color RGBA, non-interlaced","md5":"ae33acae404631e997ef8d91dae08ccd","sha1":"19fae9a6aa4bb419eba378b0d0573906dc1be38a","sha256":"38025784bedeb5e4cae496b131c85cabbd95ae0b1c0a3c9d9cb474d7262db04b","sha512":"c1f0c98bcc1ea2d28a01cc7a14c2f77d8c4c99f7b00d10773e4f40bc7fc7703341aa89bcfa3927fd67ea10fcc6516d2532edc1b43e7d788de16309c8251dcbb9","ssdeep":"1536:bZPHu0UAVHiKwJom57/ec4WK9r76icNoW80bG1q6P9Jgr:lPHWiHVEokSN19r7dpWVG46PTgr","tlshash":"a253022d7b842868cf96d1575ca7c62f6729d0a446042bdca50f29bd87f0cb81bf1f22","first_seen":"2023-04-09T22:53:29Z","last_seen":"2026-04-30T10:36:18.94689Z","times_seen":4841,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/row-bgimage-1.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/row-bgimage-1.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"eae4-65e06905-66a4a9555634cc4c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 60132\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60132,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"c7feed19158ba81cae88cc2e4301ff66","sha1":"6e60297f5a9a1d8de2c95ec8152fbe1405ab04a3","sha256":"f43cd1a0f11fadf305cf2779a848d36348a987eec3c246cb0fc1dfa98e6405c3","sha512":"c75b2186d9befb2b2ab53262f9e1d77766abee44dfead060338dc43a33a3ef69780bb31beef5a469742c71231bb2163c5a9ce20549e39558a317d78c0736551f","ssdeep":"1536:NYHDndRCr/EpnjVSEbdwI5MG75BEDOsZxtBVdX:oDdRCzlXIGGd6DbdX","tlshash":"e343019a8fe5afa2ece8177575d7dba08d122c4743d5c1ea8ad10225a3fc231b81c4dc","first_seen":"2025-03-18T04:27:57.382441Z","last_seen":"2026-04-30T14:40:38.627683Z","times_seen":369,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/images/dragIconRoundBig.svg","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:03.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 16:47:22 GMT","end":"Wed, 22 Jul 2026 17:47:13 GMT"},"fingerprint":{"sha1":"2E:DD:BD:BE:41:8E:5D:61:D5:7D:F5:38:C2:AE:75:A4:D0:05:93:C6","sha256":"91:97:69:F7:C0:9F:1F:CB:DF:8D:1A:88:BB:E7:BA:82:64:A0:2C:46:5D:B8:07:51:0A:92:BE:1F:F4:B0:DD:F2"}}},"request":{"raw":"GET /images/dragIconRoundBig.svg HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Sep 2023 19:57:55 GMT\r\ncf-cache-status: HIT\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"ec1a67186adfd91:0\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f45dfe64d99568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":679,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cef1b538160d2dc3cfd9645e012c54c0","sha1":"13bc0db6164715d9d82288fb9c5559a6dba83bb4","sha256":"4e4cb0abdc81f9302aec899a117786526e33d575d5c4f374c17f147fccab86a7","sha512":"6a67654cd7fc3ba097f3e255b7855a9ab1cc92842ca417b64d609ad101d6eeae3bda62642525ad56d7f35070f1b7b9c61395da0ec7a89d88df1eb8cfb428f7b2","ssdeep":"","tlshash":"47017b68764df53a87058355f77abcd1203b71e140d2530ca4426873e6172d675151b8","first_seen":"2023-05-10T00:33:03Z","last_seen":"2026-04-30T14:40:38.625671Z","times_seen":416,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:05.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 10:31:05 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69de0593-eb0\"\r\nexpires: Wed, 20 May 2026 11:27:32 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-20T11:27:32+00:00\r\nx-node: m9p-up-gc8\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-04-30T14:53:57.268864Z","times_seen":14248,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/css/bootstrap-select.css","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"323c-65e06905-f071fe4ff48b8978;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2208\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12860,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"3c13518e758f95b39f33ce9249aef2ea","sha1":"edbb8b3ed265e6a52a60d58aa45309f1716fb056","sha256":"032c55f8092688bd96e242ab5c1b7c63d8c04bd502ef4bfadb277e7ac57ddf47","sha512":"6cad1c0d0875376ef0cc6f9cb0a1bc161a535ba54301a9ef48b9005974d729c924496b81ae36d46e3b3beb96e75d7b7244a2bf66c2323493c5db70a728787561","ssdeep":"192:NAEV3IkN9UXliukFaFfF70Vi2Ar9kyWSDCJiUzuDcL5:kliu9F70Vi2ArLlDCJn","tlshash":"1242119db3d202704099806a398a7e6677dee451324eccb973dfe25c2f80543e9377a6","first_seen":"2023-05-22T09:42:17Z","last_seen":"2026-04-30T14:40:38.627101Z","times_seen":389,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/ggsggsgggg","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 18:57:07 GMT","end":"Wed, 22 Jul 2026 19:57:03 GMT"},"fingerprint":{"sha1":"EF:26:C4:2A:CB:E2:83:16:B4:53:B5:CF:6E:85:7C:AA:DA:A2:26:0F","sha256":"70:4B:53:AD:C6:32:73:F5:C8:5B:91:5F:7F:3E:C6:BF:1A:9E:61:B3:B8:A8:A3:4C:A6:BA:37:F3:8D:F4:93:89"}}},"request":{"raw":"GET /ggsggsgggg HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 9\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1bTT%2BXi8JCa4p6wrvT2OATQip2XATtMrppyjdemAQlSkeVMNvbiz7ERwsqWtgqHS3y5r1wvS4VCJGn0ds7Ct%2FZs%2BgjtArNcWcSr3kRXpgw7OiAQez9i3MqBJ%2BlNH5I%3D\"}]}\r\ncf-ray: 9f45dfdbbf96b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:35:17.446879Z","times_seen":14427018,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":21,"connect":1,"send":0,"wait":235,"receive":31,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 30 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7706\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T14:40:38.60459Z","times_seen":6163,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":231,"dns":0,"connect":24,"send":0,"wait":8,"receive":2,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/AcqusJ1aNJ","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:03.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /script/widget/config/AcqusJ1aNJ HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 711\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Apr 2026 12:31:03 GMT\r\ntest: azazaz\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc82\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"30628d741774d4fbbd1ea7e106249ce5","sha1":"a0e28b52f7948ba6104944359e6d93fe44f21813","sha256":"33449a9326563cffd43b6a629a6a104a4220da653b104c3e64b363917d2ad7f3","sha512":"059e9be790651592c4fddeb20cceb467864ff5f2aead29cb1f90018cd6e93314765a940a572eb6c80bb0ad6ceef28e9349f76061400963b0a8e20b64383890aa","ssdeep":"","tlshash":"9b2146f20c48586b4d457e87a15bae07243c8667eec54e70cb989c2c10963d5131760a","first_seen":"2026-04-30T10:31:50.257388Z","last_seen":"2026-04-30T10:35:31.689691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":122,"dns":1,"connect":57,"send":0,"wait":293,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-4.jivosite.com/widget/status/2699700/AcqusJ1aNJ?rnd=0.6492874952571271","fqdn":"node-ya-4.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:03.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/status/2699700/AcqusJ1aNJ?rnd=0.6492874952571271 HTTP/1.1\r\nHost: node-ya-4.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: sw\r\ndate: Thu, 30 Apr 2026 10:31:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://nixotradex.org\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bbfa26588aa17bb5cc5b483b28c06a80","sha1":"f9618c6712526ddb3e5049a6b3cc34968d456301","sha256":"348fe83b28a538c5bbaf4a88b4ab9f008c94af9e4209f5954c5001c39a33ba49","sha512":"ff5e478f97eeecca51745d9dc6d93d24494b8649e8377fa19c18ede27881937aa6bfd7d8c6007cbd15ab1b1b6cac211622685b3020a9ee1eb1e83118813584ca","ssdeep":"","tlshash":"66a02435111151040350c350d3c73d010530050171d3d034f551504471f74d034df007","first_seen":"2026-04-30T10:31:50.260426Z","last_seen":"2026-04-30T10:35:31.607341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":380,"dns":326,"connect":19,"send":0,"wait":157,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/AcqusJ1aNJ","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/AcqusJ1aNJ HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6196\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69ef3c39-1834\"\r\nexpires: Thu, 30 Apr 2026 12:31:03 GMT\r\nlast-modified: Mon, 27 Apr 2026 10:36:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc90\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18118), with no line terminators","md5":"0396887e24f82a5c739687747a2d5d1e","sha1":"e414bf5b0189af9d82589194ceb3912190f5ad4c","sha256":"dadbf61af1aa9ede34b6bd9797f5cc4a7d1e90901cb10fe3b20e1573502a1254","sha512":"a01a07fd246c3060e31ec3363f6f8f43d544c9670f76d43f2d79d14fe03d1be6481ec6f04c4639b4ddab11c9454640251c3797baf3afc2a3c8522e1b555ea672","ssdeep":"384:boU+JvepohmPF0jyrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI//AjX54cr7sXWcPdv","tlshash":"f1823b6e7959b97743b218b9516f6209733549ebd404c920a401e98d7cb8ace813fef8","first_seen":"2026-04-27T13:30:50.955671Z","last_seen":"2026-04-30T15:09:11.924061Z","times_seen":269,"resource_available":true,"data":null}},"time_used":2738,"timings":{"blocked":1286,"dns":946,"connect":69,"send":0,"wait":125,"receive":1,"ssl":296},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/forex-investment-sm.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/forex-investment-sm.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"1994b-65e06905-7015169ad2f34bda;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 104779\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"6d151c71ab3804dd08464df134c5eb5c","sha1":"f61ed4d743c8ac0234e6f658bbe73fb8ac49016d","sha256":"1b96f6c6d53f390d0364b45bdab190e4f66e357e1648023acf2dfa6f0de3f3d9","sha512":"0c092a4e518ba544cf24b6fb50371b794c42c30c8534c09ac58e197cc5e9d57370d3834d717d8aa3ec1680000616d3ee9bf175941fcdf1fb17ffcf27042d2b59","ssdeep":"3072:ZvsEfdDR84g4acvSPqKdLJ3r9VfCyb9CwxX5:Z0uR8IacvSP3dd3rOOX5","tlshash":"e1a312754d4f85c99ee1473293d48db20fdd8d615b80cb69ba2e60aebd72826e407b30","first_seen":"2025-03-18T04:27:57.381676Z","last_seen":"2026-04-30T14:40:38.610533Z","times_seen":351,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 30 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7706\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T14:40:38.60459Z","times_seen":6163,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":104,"dns":0,"connect":8,"send":0,"wait":15,"receive":16,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/slider-mainbg.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/slider-mainbg.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"143fe-65e06905-9e0b5663648e0170;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 82942\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82942,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x730, components 3","md5":"039468794089e95ad715cae031648be5","sha1":"e8938bf54dda55d865849dd8b1313245f2261ed0","sha256":"02dfb50024fb0c935d552f003c96f65409a5e6092010b74fe1f3b08d1b5f309f","sha512":"61d01e7cd7dcc988705ff19d6e0ff8fe5c47f8cacfb5e054e1720859f2c04cc27a1f90d10527853aa2168b5f150ad1cb6ce9a24f8399de64834194e1c55d0b29","ssdeep":"1536:2cm23K8MTTSc2erxQ1DzUGDfA190SgLpWP43uco/4Z:xvaTSqmpUGDI190SAuct","tlshash":"bf83f13bc74f6b92d2eb1732c9c397a8af55a4b0e152010a966d813fbf6d7d66e07001","first_seen":"2025-03-18T04:27:57.416294Z","last_seen":"2026-04-30T14:40:38.630068Z","times_seen":311,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/large/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/279/large/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 9561\r\nx-amz-id-2: AfuKWJd+EqcwweT0VgEm6+/c0BTGHR9A2laflJDnhk0QvXATj/+WqhfB5XSuG2MDc8uRZHMi04g=\r\nx-amz-request-id: 5ZK48BRCW41ZWPT6\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"af87366546180c799987073ac53f0733\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6vmhZ_PH5UG1O..xRx9fhSAwELb.H8zx\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEjojy7BvtyzNHaWVVoy5e2jgX4CTnD%2BQbtNU0oHYXCDMS%2BCi7MSnGVo%2BaGBYo6sqC501ULKylwyaaSnCW2ON8zzFUhjDC8jjl4r8tX7fjhsxUw8yYThgTMoJZkyn5yWcrJI2yX5ywW%2FHI7V\"}]}\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:85\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=13114\r\nage: 1499\r\ncf-cache-status: HIT\r\ncf-ray: 9f45dfe1db02a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"39d54251b232d1e9e8a9665e7c2c5117","sha1":"025f4d72498175bf3219ba5fe2a6341b791d8b24","sha256":"5212de593ffa17b5acc04260fe702e32b3bb815f2eda4d7ca15b085967bd39f3","sha512":"c2f616084a077398dbed12026099332369ae72f8743c1a3acf1603af3a8ce032ac090cf0bc89d11270e8e2e6bd7d79383d556db591d19459bb873aab16daa0db","ssdeep":"96:dFdUh3pppql79CzKT7MLbrbKIgB1lpIRrFjWzR6/KPax4SfPUFvzJ/OWCVe8pabE:ZSfpEAzXzvElkFjy4rNcFvzYJVjaLypt","tlshash":"e112bf6f3030faa4599c8beb653659c09457b5b3868c38230aeee8ddecc54e088813c5","first_seen":"2025-04-01T12:02:22.555194Z","last_seen":"2026-04-30T15:02:15.748606Z","times_seen":403,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":80,"dns":18,"connect":5,"send":0,"wait":14,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 00:25:39 GMT","end":"Fri, 17 Jul 2026 01:25:37 GMT"},"fingerprint":{"sha1":"6E:87:A7:FF:BF:A2:44:B4:75:CD:21:AB:C1:4F:AB:42:38:40:05:E2","sha256":"B5:D4:1B:C3:50:BC:E6:F1:45:90:A6:17:BF:F6:1C:A7:A5:BD:E9:46:9A:07:E7:A5:F9:99:E8:73:27:BC:89:1B"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 30 Apr 2026 10:31:03 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BwNQbmnoXfq3aIoBcJEiRIuO71GrpuSVG5zQsr%2B2XllB3Gk%2FxMLMakHHkm%2F2HkP6DszdG%2F%2BV2%2BA6uAsYwZFPrVIbI%2BAX5KVnZxT5ML8AtcysqBe6JuNVbbtPujnLB5Nrk%2FIkN0%3D\"}]}\r\ncf-ray: 9f45dfe4097856a5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T14:35:17.446879Z","times_seen":14427018,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":52,"dns":35,"connect":1,"send":0,"wait":62,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/moment.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/js/moment.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"24d9d-65e06905-cd24966b0b1c84;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 32196\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-04-30T14:40:38.639372Z","times_seen":1176,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"15da-65e06905-7152432b8d545462;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1712\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5594,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-30T14:40:38.608552Z","times_seen":17853,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/storage/app/public/photos/hMyKbrd3hWSZkeorxLujRfdBu9ydmXd7Ub303OKS.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /storage/app/public/photos/hMyKbrd3hWSZkeorxLujRfdBu9ydmXd7Ub303OKS.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 11:50:50 GMT\r\netag: \"b2f3-69ad629a-278d42774e38291;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 45811\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45811,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, datetime=2026:01:07 13:44:53, width=0], baseline, precision 8, 1468x375, components 3","md5":"735e30b1d58ee6263db0f009415e7cff","sha1":"62e85334466170cf180686b9c59e79fd10aa94b8","sha256":"9a4fcdec358e50d7af2f2ce5cb4dab3ec4d081104cf9608f2a02e629686d08e3","sha512":"3904c9055ca2f6d718210d7ba7738dd41e746ca13da3e486de2168cd48963b3bb2d7d301ca8808ad5f90d9b40508a035c6afab9c4f83f3992fb61c19571a71ff","ssdeep":"768:NwqC5Ya9FVmSSaXcHzvRw/SYBGG5mbh/8XSkJkigxLQfzy1O3zkF6c4QIN:iF5YFSPXARESYpKJH2gLEzy1OgF34v","tlshash":"ad237b6b1e539573391fc1708f66791da082221057d30339acbe3bffa6bd64a1e9ad00","first_seen":"2026-04-30T10:31:50.157809Z","last_seen":"2026-04-30T10:35:31.604641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nixotradex.org/temp/custom/images/investment-consultancy-sm.jpg","fqdn":"nixotradex.org","domain":"nixotradex.org","tld":"org"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:01.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nixotradex.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:38:32 GMT","end":"Fri, 19 Jun 2026 05:38:31 GMT"},"fingerprint":{"sha1":"0F:A5:A0:98:88:A2:A0:63:56:7D:29:1F:89:3B:CF:F9:1E:D3:37:ED","sha256":"DD:A6:EF:56:31:1C:38:93:3F:7E:F2:1E:3A:AE:CD:27:26:CC:FA:CE:63:78:EC:C3:1B:72:76:70:A9:5F:F3:A5"}}},"request":{"raw":"GET /temp/custom/images/investment-consultancy-sm.jpg HTTP/1.1\r\nHost: nixotradex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikc5UjROT2dkSkRDaEwyaXlGNWZPM2c9PSIsInZhbHVlIjoiZ3RZWWVReXNWMWtIeWJmNzhhTXhHKzNuZit3OXgvblYrSytJU1d3cHVhNlNKNEYybnRLcjJlcU9yV0hiN20wbG9xVTRUUXlXY0lYeFNkRSs1SUFVVUFETFcwOWJ6RXRBWUVZOXZTTTdGZWRGTmZqZ3g1VndMZExpbWp0VG9iMVoiLCJtYWMiOiIyMGFmN2FiNzI3ZTUxM2MxOWI5MGY4NWIyMmJmN2M3OWMxNDAzMDI4Y2ZiNDc0NWFhODgyMzljMzhmOTM1MzgzIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV2V0tyamU0U3Rld0dqa1VwWFVIQ0E9PSIsInZhbHVlIjoiakprTFZjSGdRT1lCREh0NlllWFp1VzNrWXdJcGtwNldWK0QrZGV5cVArNU5LVWR5RDRUSnpxWXdtajdBOHR2djN0NW9LY2RJZ2JIUVpibG1zRnpMZDNYbVdSa2xTd2wySlhNZ2pXeXVMRzZPTTdSWkZkNmcwK2Z6dkxEZXl4Vm0iLCJtYWMiOiJkNDNhNDhkN2RmYzIxZjMxZGU0YWU0NzhiZGE5MjA1Mjk5ZDVkYjZjY2NkZTcxOTk5NjBlNGVhN2ZlNWNkOTk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 07 May 2026 10:31:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:45 GMT\r\netag: \"100fd-65e06905-ee2061c245e5d9f5;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 65789\r\ndate: Thu, 30 Apr 2026 10:31:01 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65789,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"bce108b1f6b7e457c17fd834671653fd","sha1":"8ea5a9e514d2217ae81b6ac406f5cdbe4d0a5fcd","sha256":"80e141a0b2e918793daf5d8c6d43f95ae0d4bc3f479c0cfd816fda3bc1df1731","sha512":"547db66a7a8b6c16dc4b58d620d35d92b5b85d587886aec5c70efa6a24ea42725e9b0640cc9457915b1cd3d6276019721b0702e782a0a02baa5a0e5f4aa4a793","ssdeep":"1536:k/3s0Q2NUrGnNjKB93VoWk7SogjepsipU8QpHXaTPAA:WXNUrAjKBBwSoIxpHqTf","tlshash":"eb5302457cc037d85ded036191ab578b2fb35390e5a2e356baca724c572ba3ced03892","first_seen":"2025-03-18T04:27:57.402289Z","last_seen":"2026-04-30T14:40:38.618523Z","times_seen":351,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"nixotradex.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 17:57:17 GMT","end":"Thu, 09 Jul 2026 17:57:16 GMT"},"fingerprint":{"sha1":"0A:76:FC:A0:B4:90:2E:93:25:BB:9A:D5:01:C3:A5:38:BF:76:78:92","sha256":"14:91:25:42:87:CA:3E:E2:A5:79:BF:0B:95:61:5D:98:A3:D4:89:33:61:77:84:02:C3:BD:2E:BC:FF:4E:77:D7"}}},"request":{"raw":"GET /api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nixotradex.org/\r\nOrigin: https://nixotradex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ntotal: 5\r\nper-page: 100\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"53392f2df6c0286b4685b8b104db5b17\"\r\nx-request-id: 6827855d-381d-4c05-88dc-f7bb59877762\r\nx-runtime: 0.004503\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: HIT\r\ncf-ray: 9f45dfdf8d5649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4046,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0285a1e5007f9873dc5c657164a6f565","sha1":"8e99545df584b7c5004317ecdbc64c27427ae5dd","sha256":"7423dc94c0c76ae45e4e4811bdaa8818b8eee319b86d1b2a3d8189cf3b46bfa6","sha512":"fd36837610c20079fb71837d2143985e2a3b4e4039e90a065a85eaef399e820ca34c740e1ef6627af13567957447776147980ff1afc8d5665c0125fd8a90a2fd","ssdeep":"","tlshash":"a38111931d34dde3c1b1261a589e36241d6ebeda88c5cc171f9eccce48647aa410ee1e","first_seen":"2026-04-30T10:31:50.283788Z","last_seen":"2026-04-30T10:31:50.283788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":67,"dns":35,"connect":1,"send":0,"wait":126,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/2/large/litecoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nixotradex.org/","date":"2026-04-30T10:31:02.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/2/large/litecoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nixotradex.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 7680\r\nx-amz-id-2: QitQ/rG7CZyd1QJbzi1gqNOcXac8pLxmzCvAS5R+ks6J7F4h5W2tmBblfNGVNOVtu/BAk+T3AZeB0ys+GvRgYIXHM8U0hwm0\r\nx-amz-request-id: 9W7CHSVSSP6HSCB4\r\nlast-modified: Wed, 29 May 2024 02:40:00 GMT\r\netag: \"2cb0c91b0d82542c140d900d549dddc0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5qPrLUbI5j.JglMI78Hfu1JUQECZPGFM\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1715\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erl1cWhxv0HagsY3Wx%2FHJ7R09EU5oxgylD%2BdqoHEfhoN6Cb%2Fg2VqJinzZp%2BcR%2FgKJVjTbf3GJldCUFfcvF4kzwW9u%2FvRnECxm%2FyhJlYyZIs42AsYZy3biMcOWpdDosEbNINlOT89n%2FvgYnGy\"}]}\r\ncf-ray: 9f45dfe1daf8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"2cb0c91b0d82542c140d900d549dddc0","sha1":"ed1c900fca53fc1b94a536c76bf2c9760424ed9d","sha256":"169ed6742d2bc4098e00de38a610578bd6e98227e13a8b38ad47cd977056385e","sha512":"a660f2ae5c860cdbc7b5b7dc8e2408ddfec249c5de96ca269ebd01e674c24241650bb719fccab0f4139f94eba25e65b231797c0528fbc94202b516d6419e28d5","ssdeep":"192:NSGHHL/j2qkaS+zipeHxwauyPXfEsYF7yWgX1jjBghvnFDoz:MGHrrDkdeRwaNPhFW+lgZ1e","tlshash":"65f18e96df82af6cc6915575f8b78734814a0f0ad6ae4907f9dcaf0ab94a3004be6012","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T14:40:38.636722Z","times_seen":946,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":73,"dns":17,"connect":4,"send":0,"wait":15,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
