{"report_id":"192ffa71-263d-4c6e-a2b4-620e13e9967e","version":6,"status":"done","tags":[],"date":"2026-03-09T18:50:47Z","url":{"schema":"http","addr":"xbct.trade","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"xbct.trade/","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"title":"XBCT Trade | Unique Bitcoin Investment Operators","dom":{"size":6055,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (378)","md5":"69b106242d866eb86ac582ea75ebf85d","sha1":"591d8fe320214507c0b1b3975cddbbdac08b8615","sha256":"75744f7ef4e44d0f9375ae3ce1ada2e7638dc702855b1481853befc8fdf4fb29","sha512":"1c1c9ba710424aeb961e2914018f3cf8d38cb68948caf7c6c5a065dca00cf4887d5e1fb5ab38aeae57fc09e186e9c0c229c1eff2fb662883dff1cd3205dd7d20","ssdeep":"96:Wr+INiBUgI2JSmd0ck2Jh2ngimuC3dKJuz:2N8W2JRdG2JhotmuC34uz","tlshash":"cac1531b4c569a1956002c21f8fbb429cda9818fc72cd9b1b4ac443e6fd4ed9c8dbd6c","dom_hash":"domhash73717c0cfb576dbb47c7cbc808b1fc07","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xbct.trade","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T18:50:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s3.tradingview.com","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2010-03-20","domain_rank":165395,"first_seen":"2018-06-24T04:06:00Z","last_seen":"2026-03-05T23:07:05.432982Z","alert_count":0,"request_count":5,"received_data":70721,"sent_data":2256,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"xbct.trade","ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":41,"request_count":41,"received_data":945211,"sent_data":18042,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":3,"received_data":65813,"sent_data":1420,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.chaport.com","ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":87646,"first_seen":"2015-08-24T06:07:03Z","last_seen":"2026-03-07T04:34:45.635864Z","alert_count":0,"request_count":1,"received_data":1878,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.getbutton.io","ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-03-05T05:01:40.96079Z","alert_count":0,"request_count":2,"received_data":885354,"sent_data":851,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate.yandex.net","ip":{"addr":"213.180.204.194","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":123882,"first_seen":"2013-04-25T11:29:08Z","last_seen":"2026-03-05T20:53:08.821339Z","alert_count":0,"request_count":1,"received_data":13292,"sent_data":492,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xbct.trade/","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"55fb3b5b2fcc3d007807252d6380a446","sha1":"33d1cf0bbe0811db4a6f56695eac3114bcd5b1a6","sha256":"3cd8af96612b06a7fcfef18a8dc2a9a870a086910971609f66fbe5bec7a29ed5","sha512":"13c464837929f6bfa058bfe3b58cd6f660fad65e0153e2abc27b89b1f8cc2008ad795837f38be9847862bb069b1bf649701fccc1c8c56f9c5758e2cdfce694f8","ssdeep":"","tlshash":"0df0dc6e2d14103725563038a3abda08766fb2581388c7488899ec0a2d768eecc08a5c","size":460,"data":"","first_seen":"2026-03-09T18:50:53.418087Z","last_seen":"2026-03-09T19:08:33.03975Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0154a52daf4fce67a0ffb86e62f3ad5d","sha1":"cabc7e4a8c6f51ea18901f17d045c0d9d97d608e","sha256":"acfb231991fbcf5d4a4afdb301bd37569899cdf9ca0a12524b31193189815666","sha512":"540882cee2d988bf34e857f2e822b76a609199012c3b5a347d1d182837683b441a79eec83e9399dd4e7642e09dff79b62d5dc9cbe19f7cafef9dd845b290e668","ssdeep":"","tlshash":"a5014ecd59243636430bb1f8712f984039f86068cc51e82c844ec4f86af1ed4bc0bdae","size":677,"data":"","first_seen":"2026-03-09T18:50:53.420043Z","last_seen":"2026-03-09T19:08:33.04044Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8e246008f2fac4083847ba921c82e97","sha1":"7e4bc56e6b5e6ad42a49814b64367777bf129015","sha256":"4c9e4f6d78a5d3255cac657199ec29395e0f6cd78fd2755cc336ad6b997ad7cb","sha512":"8fe4e35640995d5a9b66ce349a99b6c906cc91079d01fec160d586a84b9fdbc22aad94b4594751c80e4ddcb1d73c4920ceac330b32fd258639ff58dfa9b44af3","ssdeep":"","tlshash":"62c02b2751f17f84450ea103f21a006c3b4809c991305876267c3d0c07ef1f8abd7494","size":151,"data":"","first_seen":"2025-05-07T12:31:00.328227Z","last_seen":"2026-06-06T06:43:49.193752Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /external-embedding/embed-widget-forex-cross-rates.js HTTP/1.1\r\nHost: s3.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 1837468\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\netag: \"49a843790981c7c000a3c7af4caab167\"\r\nlast-modified: Mon, 09 Mar 2026 10:44:36 GMT\r\nx-amz-id-2: hci5DdBdrrQvfY1GLd2q9T7KXLvfdKWYIT3zJjKQeZxBkQQydVvPIZXsqQioG93ylI2XdgxyFDk=\r\nx-amz-request-id: 1WYC5GRG5ZVRC3RN\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncontent-security-policy: default-src 'none'\r\ncdn-cachedat: 03/09/2026 13:58:32\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 603a7d41aa80da6b1a0af6cd312b3591\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12980,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3458)","md5":"49a843790981c7c000a3c7af4caab167","sha1":"60c2d09f65c24847214f68b54eff2477a964c20a","sha256":"327739d59c941e5cbb02d9cef309b07b432234fc88a10512af27d330047409b0","sha512":"5ec250ee77656b5123ef7e50f0036d5e980aba37a3c913ebed2b9d82028234e1d9fe4b3a8a0e22730a823c24cc0d551603a24639e5b661e2860a9b2f6a2a62cb","ssdeep":"384:vgXsuCWoofYkFdjh01N92sbjc9uKF+SVPtME9:IXF50f92sbjc9uKF+yyE9","tlshash":"1f42c89ab660dcbd91d545cba07a2321b61d3944b203eca4f5acd4c550bdccca531fbe","first_seen":"2026-01-31T06:33:31.006281Z","last_seen":"2026-05-05T04:32:18.844685Z","times_seen":296,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":110,"dns":6,"connect":7,"send":0,"wait":10,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-market-overview.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /external-embedding/embed-widget-market-overview.js HTTP/1.1\r\nHost: s3.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 1837468\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\netag: \"2a6c2d2bede991f66af9e969afb003d7\"\r\nlast-modified: Mon, 09 Mar 2026 10:44:35 GMT\r\nx-amz-id-2: x24GdZUmiigPVjw4U+ytQGp50fWAK4JM/DwUTM2/xDNwgnWOy3zVnpwPeddkC8kJnFZu9bAiRRazxy2DAgQVY3RekO8yr+LJEnaJtlTLJUo=\r\nx-amz-request-id: NYPCE9RPB50CMQF0\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncontent-security-policy: default-src 'none'\r\ncdn-cachedat: 03/09/2026 10:48:01\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3bfb854b3d359ab6f7e367afa7ab448a\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13699,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3458)","md5":"2a6c2d2bede991f66af9e969afb003d7","sha1":"47de59f614a755cd28ed0b827219bbfb7f772449","sha256":"646f2680e109a1b549dc5c64b033eebf707ae21c6c0d949d7d8de0299d99d48c","sha512":"238a8e49e42a322eba5d811fd786ef18ee75feac5f15a1b0b0fc224c615a6a75adf329e88a3a00dfe857653f71d83b585950b5666759e467ae2c8f3d8204ac1d","ssdeep":"384:vKXguCWoofYkFdjFjI92MtObODuP+OSVPcSkTXu:iXZtjI92MtObODuP+OyTmXu","tlshash":"ae52e6aab660dcbd51d942cba07a2721b61e3944f203aca4f5acd4c550bdccca471f7e","first_seen":"2026-01-31T06:33:30.978239Z","last_seen":"2026-05-05T08:08:30.155587Z","times_seen":410,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":10,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/js/jquery.countTo","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/js/jquery.countTo HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T09:29:17.285502Z","times_seen":40773,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/js/bootstrap.min.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/js/bootstrap.min.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"90b5-5c3d2648-53ac0b86f73e04a2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9515\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-08T11:48:30.481073Z","times_seen":90409,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/scale.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/scale.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"7884-5c3d2648-d772765a33ef7744;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3564\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30852,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"31dd03187d264f95f05d52c90993789a","sha1":"8dacecbef4e6a867bd7a55c2404c425fb7a2dc9c","sha256":"ceecc5b142b34e511bf55aa3bcabadabaf7be995c3195ef57090060c1c42c3e1","sha512":"a65bc9401a41619a187046e892f514ff7c98b9f10d7e3068cd8359d4c139f957fb615e7694f269bf723b97adc7923444d5014a4a6a7af260cdb5e7c3bd447ad9","ssdeep":"768:/tPrcoqMcoqN1tcYarsjXFYjXSRiiIKWtERPrjoqA1t+2UYjXpMWW5H:FPrcoqMcoqN1tcYawjXajXSRiiIK3RPl","tlshash":"34d29c651c50110483b7c7a5e7ca6a74e93ce16355912eedb7c1198f8fb0ba813ceea3","first_seen":"2025-08-06T06:00:58.260852Z","last_seen":"2026-03-15T05:18:35.157103Z","times_seen":10,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/image/logo.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /image/logo.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 09 Apr 2025 18:15:02 GMT\r\netag: \"213a-67f6b926-a3f9fce8034dfe77;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8506\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 129, 8-bit/color RGBA, non-interlaced","md5":"8df8a5edefef665e2339d86e8293631c","sha1":"7b85c137223c6a69e6841ab60d43fc1ef87c3249","sha256":"fc4f296797ae076dc4f3646fec362722b80d6d0db1e357f7a1dc6d44c20d7a4f","sha512":"b35953fd2b020c4886171ab8733372d1800cda1c5b3986aecb214fe60e45dbf8b75b72f2b7bc7bc2f274c33059c80773c759352fa130f9490a2d91ca29edf895","ssdeep":"192:5SDS0tKg9E05TITDvN1KnC0GzCQ/nEk8PNEnMtf3s3k/PvZ:gJXE05MX119WQ/98VYM124PvZ","tlshash":"2602afdedba0994e24bb7b426adcb00bef843d5840c55b3c59c2abcd5461d4feb81094","first_seen":"2026-03-09T18:50:53.254468Z","last_seen":"2026-03-09T19:08:33.03302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/cost-efficiency.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/cost-efficiency.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"ad1-5c3d2648-a0299b36e1207174;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2769\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b873a7da38bf955f39ce92839bfa14da","sha1":"8cfd6108be017c4997690c3ff18da325f60694ac","sha256":"17cbbcc5fe7275156ab97be0a10259d9055415cbb41f90302fcac1064390c5a4","sha512":"934a5036e2561f417bb246940b5d4239d56282d05a072018576f6c033352439a5c213eef7e6678a99ecaaf2c027409571b783a3bcce48e2f930808eb5237abfa","ssdeep":"","tlshash":"94512b946e223881f064f089d7c235ab96560c41ced9a5fadd8fcc032da96bcc9de1c2","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-06-07T23:42:52.985885Z","times_seen":309,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/images/5b55bb652af1a.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/images/5b55bb652af1a.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"15f1-5c3d2648-5f3e0673b3035786;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 5617\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 98, 8-bit/color RGBA, non-interlaced","md5":"aa54e3f653a0e65d03e0f57b5104f885","sha1":"d922ff4b83d97a520bb74d915f2d4cff9a77733c","sha256":"ba9da982836bdc4e784fd37726fafc21951ab8c405e6ccec262af39d77cfd72e","sha512":"ed59631ff89a4ba5a3c684b4b22796fa1063db9b471e00f507ed33cbae5057aa1f57f2bc86a174836a7f3e58066d07c90c944e8894ecba1f107610eb59e85e20","ssdeep":"96:SK3hOG0MEQGpjjUDf67JoUDdS7iA/V4t+9O+g66aVhIKoQEZtk3vQrAiJuE6u:SK3J6jUDi7JpwWAN42zg66aV+7PG3vC5","tlshash":"e0c17d5722d0cffce17a17e453110ee77c621d98a292d5813a73e05aa59fa9993003d8","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-06-07T23:42:52.94043Z","times_seen":195,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/js/jquery.appear","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/js/jquery.appear HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T09:29:17.285502Z","times_seen":40773,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/js/jquery-ui.min","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/js/jquery-ui.min HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T09:29:17.285502Z","times_seen":40773,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/js/jquery-2.2.4.min.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/js/jquery-2.2.4.min.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"14e4a-5c3d2648-3563f7279434f92;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29167\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T11:04:16.803523Z","times_seen":283844,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/ion.rangeSlider.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/ion.rangeSlider.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"d12-5c3d2648-e47ad9fe6bc1ee6a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 752\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3346,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"619c67f849402debc92a4405fef51dee","sha1":"d3f077af3422c1eb23d5de7f67efd25e80f9873a","sha256":"f23b34a2e2da418a0094dd989b0579cd6f23e8e5bb08ddfba013d0169521e658","sha512":"8707b9cb7c43488681c2e2b77b742b0ffa77bc6923284c0e18f3f89813eaef98d2c8efb653269ec258652102240dd351e21ca9626d0e76644f45d801a62fe5c1","ssdeep":"","tlshash":"00619a195da31640780af6f06f967b9e6630b00bdb07dda87e4d6200cf4b389a692f91","first_seen":"2023-06-20T22:17:54Z","last_seen":"2026-03-20T05:05:50.224635Z","times_seen":18,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Alegreya:400,400italic,700,900,700italic,900italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Alegreya:400,400italic,700,900,700italic,900italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 09 Mar 2026 18:50:26 GMT\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13653,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cf5c3deee93fe8ffb8452254bc16a110","sha1":"692e057f55d5eb01e0d85c6a00a6c0ab5b843818","sha256":"3894e334c0561f163b780f06446a0bfed5589e253d01462d26b6be7071f560ae","sha512":"09c951b786560a9b9de28c0500c0919f91f4a213c608101731de6ede51116ed6b77293fe9f5c24613e761f71329745ebe5a1915bab5638fdd744211a8378ece7","ssdeep":"384:Rz+hzmz8zOMz5zlzhe+heme8eOMe5elehY+hYmY8YOMY5YlY6G6ziIlGLyG/enIu:RScu/59IXFD6g0ONfh82C6BziSGLyIeB","tlshash":"c0529b92402698847b632cc633df7c258e4f31cba496d47a9bfe2c98bc95d32536178d","first_seen":"2025-09-18T09:04:24.55243Z","last_seen":"2026-06-07T10:37:24.612686Z","times_seen":112,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":241,"dns":1,"connect":49,"send":0,"wait":65,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/download-bitcoin.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/download-bitcoin.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"a74-5c3d2648-939e392ba7dc0742;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2676\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0f2b8069e3a60e3b937617e941fda05c","sha1":"851af569424fc14bea65f49c2441fb62032e19e5","sha256":"e37b52ca61cf380ae491e4ddd7c1ef10d4cee012e696b3ee5d7deb7584b6b8f5","sha512":"d322e64807a3ab29bd8da86cc44b7e3ffba4f0c510e96f39c96fbfe4f7356d8c3a09508200b71faf1e97924b4d02f0096a649b03dddcca803d6abcfc392a17ca","ssdeep":"","tlshash":"2f515c067e64ad803841058310abe4f1d979c7a1a090fd13a9dedf0a8da20fa207d0f7","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-06-07T23:42:52.939857Z","times_seen":347,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/js/active.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/js/active.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"21fb-5c3d2648-369c7c1c87c3cd45;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1799\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8699,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5123e2a8b0bc6475ccb5664dc7dee85f","sha1":"631779153be31828e62d0dffe655a2c2f7fca68a","sha256":"70a75f978bef6fb33aa02bf554dfdf0cc179d8501a1b488dba44d0d27bf94744","sha512":"39dce7d540d40573916315172fb0ea5cbab7490bc2a841364751a40aa3e260ead1f731a62d434991ee68090fb9fd16e3102e36ee6d5d2c35284c75b3db4af306","ssdeep":"96:ImkIAiSvzQWJ3SGTij0xDBnKK7aFKHRwrv14hjnACH6yxiqkTxtpvoys:80SrQGCGTiY3ntfAujnV6yYttpAys","tlshash":"be021f09f5b11c625477307b5ebf9184aa29840b5a0aec20fc5e59cc1f5d24cb077baf","first_seen":"2025-08-06T06:00:58.268311Z","last_seen":"2026-03-15T05:18:35.126403Z","times_seen":10,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/js/ion.rangeSlider.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/js/ion.rangeSlider.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"13a42-5c3d2648-4da326644c3dc024;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12162\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80450,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c576bfc92abc8d63bec07cda9f5748bf","sha1":"d8b2ced585cd98824ecd2273e0a5b16df5db7fc2","sha256":"1b1e2a0f3ea2d5cb3d7e8865457c5410563cbf768fc4e9bdc5bee0b53db77f93","sha512":"0391c91bca72bf181d1109b977de7bbe8aadc05e73aa4615b0af9d765dadbb51308a038b4fc4669e6298fdb63646e666ebbd691f3b356ba4888236a66c239542","ssdeep":"1536:1k9H0McKxsMdGo1yVruWLU1xdmchAxdmoVG6f:1NKxs+GohyVG6f","tlshash":"1b73fc0a1bfb2251c51360a85f8f020ab635921f5a07d9ac3d7dc3d45f9973862baf78","first_seen":"2023-06-20T22:17:54Z","last_seen":"2026-03-20T05:05:50.174327Z","times_seen":19,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/translate.google.com/translate_a/element7876?cb=googleTranslateElementInit2","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /translate.google.com/translate_a/element7876?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T09:29:17.285502Z","times_seen":40773,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/ranger-style.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/ranger-style.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"906-5c3d2648-7511c0f83b3d9055;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 677\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2310,"size_decoded":0,"mime_type":"text/css","magic":"magic text fragment for file(1) cmd, 2nd line \"/*-----------------------------------------*/\", 3rd line \".custom-input{\"","md5":"41d4f89ebb49b05a0756558e45f4a20b","sha1":"fc862e87f5040ce71fc0a7e590cf4aa43b2a385c","sha256":"f1a887c8ce2819798e30d54a456463a6d115f01f99a7ead98bac33fedd373d51","sha512":"a9153dae85048ff0e6ad09d2b6aaf4920d9413a2c5172a3ddc8fb617b72558f8ab280321d0e380d540f8fb757c357c7cac6d36ec0ef615d3dd317e557cd05bae","ssdeep":"","tlshash":"d041ed63bd052885f225e6a9fe54bf5ed72e3817680e1f30bda4341cc2840d965baf8d","first_seen":"2026-03-09T18:50:53.266873Z","last_seen":"2026-03-09T19:08:33.015505Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/add-bitcoins.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/add-bitcoins.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"cc2-5c3d2648-9496f8fe0c56eee3;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3266\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3dd7c27dba155bb636097e7178895349","sha1":"dd95a6eba0f9e5e422eeb7fcf8dda39f8608424b","sha256":"67d5be7b9e96c63b241186a95d4518006e7baa0931794529bb85ea4bfcbcc16c","sha512":"ef273128794ae260c0f72ff59656bdee83c19bf4ce2efd2f15ef0c813a6a44fde9de6f3cfb23d80ea44e437e072ae65d8c452a59db390f98a9d86dcfbcc1305e","ssdeep":"","tlshash":"94615d18e341d412c792945618ea8d39ff1f4690d583fa15ed17d822ed743b61b7e8c3","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-06-07T23:42:52.954561Z","times_seen":342,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/strong-security.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/strong-security.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"d17-5c3d2648-9fff34b2466ce6d6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3351\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 64, 8-bit/color RGBA, non-interlaced","md5":"c5176a720aee4031200cd255dcfc5959","sha1":"912fd949f3c7540f035120170b1d2f6780c94726","sha256":"1a1fe67bed27c4713182081a69310628d7fad29bf1dba94322572b112c7057d6","sha512":"ff745a62ab50fedc6d1bdf2cc42dbbb59db60d37a1553ac66bc8c9a5eaa5e377e1decf40c595627c0373ff4be992a9dfb314e7e8b7e9b6ba517d9dbef9aaaccd","ssdeep":"","tlshash":"91611a0bbc949942f15db3d208fb70b6f816148594e8c478f98f9c9274905abab6d1ce","first_seen":"2023-05-14T08:44:13Z","last_seen":"2026-06-07T23:42:52.934459Z","times_seen":319,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/images/1532345051h7.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/images/1532345051h7.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"21c0-5c3d2648-38d63be048e463cf;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8640\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 97, 8-bit/color RGBA, non-interlaced","md5":"f42e758fa06d469ece0d4fa1fb8be1b0","sha1":"c36ff830a02d16038223b12dce64717a67564076","sha256":"4edc66873fd2660752f7813bd18189c895a83ee4466b15a5ad3449cd9a4290e4","sha512":"7502b94d82bdee0578c7fba42783c2a8405943904d815a5f185ba25770f3f886fddc0a3215cf24f2e5ab5a360fd63308cd77f1b2b9db0293eb8faa76f9869ee1","ssdeep":"192:hjwqBGZqa3ILk4YPHdiwqnwU7byXfoL+7dH1qG3eb:hLBaqaek4UHdivpL+hH1Beb","tlshash":"b502af9da0e09b644e6cccb1f32cc591e9b97756c230df0d3607b7a80b0378f54a66a6","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-06-07T23:42:52.942966Z","times_seen":192,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/js/jquery.magnific-popup.min.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"52d0-5c3d2648-ac3c5cd9d56dfb9e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7384\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21200,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21071)","md5":"f7501bc9635986cd6e48f19c989276be","sha1":"16ebd9b82ddc45699ed629d2e704ce65e0dacf5f","sha256":"f58028704edd4cead02e8bf05f79d788dbae6ada0278c73ee88e28c2dfb7dde9","sha512":"13bb79acecb61535ed197a59db1bbdf27e0d85257aa6c413b774199cc771cc5ba7b524edda7d91186c0ec4cf910f91aa3ae99fa43cdf0295e5bdfe87b1aed0b7","ssdeep":"384:jPhVIXQ2G2XAQyqVxRQ1giCCMLtA4Tn5h5/96l8aZwHwztLCpz3sp:jPSQt8zn5h5F1qkOLCZsp","tlshash":"28921964f2b2b26383a735b8646f700939729953ed06c855b55e84d86efcec89027f3c","first_seen":"2023-03-07T01:20:32Z","last_seen":"2026-06-08T05:46:45.94958Z","times_seen":1569,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 12:03:04 GMT","end":"Mon, 11 May 2026 13:03:03 GMT"},"fingerprint":{"sha1":"71:17:3F:B2:1A:A5:2E:DA:92:C1:E4:E2:11:E9:80:2C:13:52:7F:73","sha256":"7F:3C:98:A1:84:80:A6:FE:5C:E1:D2:DF:EE:86:0C:F9:5C:27:C4:6C:B5:D6:90:29:A5:FF:E7:5D:AB:8B:28:83"}}},"request":{"raw":"GET /javascripts/insert.js HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 15 Jan 2026 08:47:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0C7ozrnSx9g3u8LZfjbrrze80Rm4lbXgM7Pz2h5Sfz791dQ4CfTvAR5h9WB6kGeesYyP9nmVyWA%2Bz%2BGtxYxhNLqMezxKlJ0D%2FIDJCfi\"}]}\r\nage: 4104430\r\ncf-cache-status: HIT\r\netag: W/\"6968a99e-3e6\"\r\ncontent-encoding: br\r\ncf-ray: 9d9c43ec5db10b9c-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (998), with no line terminators","md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-06-08T08:42:40.851421Z","times_seen":1462,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":35,"dns":1,"connect":8,"send":0,"wait":15,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/magnific-popup.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/magnific-popup.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"25fa-5c3d2648-456841ebf378badf;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2060\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9722,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"71d1f165f523271cf32a6f6c8188e2c7","sha1":"3ded82d6c98efa1de3497565c41d9a299cc0fb43","sha256":"f5c4b73a27c2e4866a5af9a7b483ff76b7f6553605ec6d092de9e08df1bca6c8","sha512":"3b7731a1160189026d6dca9225a3cf2cfc0142a2adae1edc35b66e713944e16f9b4b2bca949df1f38a93a643a92fd3ae041ede335bf76259b1b064d3479df7e3","ssdeep":"192:hNQ4fS5bzplrVQ+mcS3n2s96/LEDeXHFykgxDFxFnUFAQHpkBzE3kBGkr:q0x3pQFwFTuE","tlshash":"bd121ee69fb22301e526da98a3d7a75433164013e71bccab7fd21448df8d7c851a3781","first_seen":"2023-04-10T21:38:20Z","last_seen":"2026-06-06T06:45:08.036561Z","times_seen":278,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/payment-options.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/payment-options.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"a62-5c3d2648-5f8115630fbb0cf7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2658\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"14bb6b183271d05eaaa1f79c4a1b0b2d","sha1":"071d0eb2a752e18645e4c58ecd304ea050fe8358","sha256":"e6e672bebf8bdff4e7964275033c6c65512d5c20a483bf32942830805fe3734d","sha512":"6a892bc7f44df2f8032d088e01afa281ec31e44cccaacee57fbd0d650896ee60ecd7ea1fc1fb4daa336d96f675d246cbd24613da6a872f0bf3a6c97980ab09b5","ssdeep":"","tlshash":"72513cc9f134a4419908e7e23ad3b012b348058097cd55beedced80a4eba1a34a191ef","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-06-07T23:42:52.959883Z","times_seen":312,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/mobile-app.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/mobile-app.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"9ba-5c3d2648-4ba2b1a217834856;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2490\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 64, 8-bit/color RGBA, non-interlaced","md5":"e0aee317274edc9a1144d7ce8cee7193","sha1":"3afc320f00b0bfcc662ac894d4f3c615610b97aa","sha256":"d2c0d0d03eb2bf7031db3d32dc5a3c497d438f60f51419b80a57a8a38a330a38","sha512":"a775d2d68c21346333805e023e326628ff736455aa987018a66a50304699ceef9083253dcabec5459aea4b50ba396e89a9dfd30f3daa59401493adc077095697","ssdeep":"","tlshash":"40511a4add0e78866482859309e650329f76c982d4f1af27f3c2cc1ad8d10b9d96d5d7","first_seen":"2023-05-14T08:44:13Z","last_seen":"2026-06-07T23:42:52.981047Z","times_seen":340,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/js/bootstrap.min.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/js/bootstrap.min.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Jan 2019 05:27:30 GMT\r\netag: \"90b5-5c3ec0c2-48ba876b5595a99c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9515\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-08T11:48:30.481073Z","times_seen":90409,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/js/select2.min.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/js/select2.min.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"12e90-5c3d2648-e409f999a706f18e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 20155\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62922), with CRLF line terminators","md5":"b848d65128492980f9699ba74871e0a8","sha1":"690495f55749fffc77c8c4e2e81db886e2cd350d","sha256":"185fb3c656a0e6732d3c3298b856ede02d9a5a930c182c8edc6934b7aca4976b","sha512":"1b013c66ea454b6359821a50523abc8c30025de216cc81de93dba9fd9c8d8068632baf7176cfdf670dbc1db52bd94a2cc49ffaebfe7b17e518e3ac41e488d28e","ssdeep":"768:f2oLNdg5pTFxxoiQduQLCyXiXCYGbk0QTeeUBo47RTeqX5+nZprIf/ny0RfS9KH+:hr2xOiQduE88QSkqJKHrAvf2KHHe","tlshash":"a273c94db953723545bf21e6607f010a723a9b7e600589acb468c9d879bfc15322bf3e","first_seen":"2023-03-13T11:19:22Z","last_seen":"2026-06-07T23:42:52.932389Z","times_seen":156,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69512,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (660)","md5":"9d0567ebc0d4529ef6b3a96f21578eaf","sha1":"3c542848c81a03176a2e836db60cd2b8d9c89868","sha256":"137b2496f57b65e0ef1e43362a814ea119d48a483fe39d9c363fd510ccb6548b","sha512":"58fee26df45527b040ca9af80ae88460fff52e972d359eac2b75b06b8b23ee805eea384c875bf37ed55a7662ed025e41fe604b40c3948d8595eed5031598666a","ssdeep":"768:7mR4cebJ1O39FRGJ1pQBFHne4Pd3yPzGF:iR4VbWSpQBFHne4QPzq","tlshash":"6a636329d9f61533009784e2b9a51b0bafe5964bc65f8a5037ec0ac82fc7dcacc1765c","first_seen":"2026-03-09T18:50:53.300708Z","last_seen":"2026-03-09T19:08:33.014597Z","times_seen":3,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 06:13:40 GMT","end":"Tue, 19 May 2026 05:12:24 GMT"},"fingerprint":{"sha1":"DC:97:69:5E:8E:EE:A7:AE:08:2C:BA:84:27:CC:78:BE:48:DE:D9:B8","sha256":"B2:BD:82:B1:F5:33:E3:71:20:4B:29:85:BB:B8:05:14:BC:40:94:63:88:A2:BF:5D:3B:63:04:29:51:B2:D9:85"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xbct.trade/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 07:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"698ecfa4-6beb9\"\r\nexpires: Mon, 09 Mar 2026 19:13:56 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 9389\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EAZOXQguB867AlIJPFJWAbQkbgOcjLcIA%2FH0iYadvA4C84Joq7fkouvFZGtn2p8yrs5443fqfn2tpE7ppcY21xayIKxKXLVGIWcJM0uGvmpo6g%3D%3D\"}]}\r\ncf-ray: 9d9c43ece9d52d96-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-06-08T09:19:13.579298Z","times_seen":1748,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/images/favicon.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:27.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Mar 2022 16:24:52 GMT\r\netag: \"1699-621e48d4-b83caf0edf0ab0c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 5785\r\ndate: Mon, 09 Mar 2026 18:50:27 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 512, 4-bit colormap, non-interlaced","md5":"fd22c8b384482fe961f7c4bd0a48590f","sha1":"b3af1e841ecac2cfc8a5f465684048ffdb4b7a36","sha256":"3c7adc0d94e6fb1ef9715736af44c6b2ba7d98522fd67118b7162169ee558804","sha512":"2a805c99e003c3c5b7a8f3d61442c2f8c4c7403a6fd13ed1c32f7956b1267cc25ff114efc12d5054aa9b2e90e53e1f13c48a55a211872342f965344a6ef878e6","ssdeep":"96:DhMLvyzQa8oQ+6PpphROfGIhpkS/rsHjHlpvQf/cG7bIENMZ:q5a8lPtkhpH/rsHjHltQ3cMIaMZ","tlshash":"78c17d699d562828ea19ea4106e2e42b4df2d6b836557c3b6d143bce28d28742d700f3","first_seen":"2026-03-09T18:50:53.314309Z","last_seen":"2026-03-09T19:08:33.027305Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/skins/orange.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/skins/orange.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"198e-5c3d2648-9939733315591e8c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1369\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6542,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c99eb96c0d9e413add85526d8d1d0076","sha1":"bf86911e753a32c5d2b72a90885edfec9b3564fc","sha256":"94c511d590cac6e95fc9b3c26810776ccff141a7b8dde2d7c863c4ebfb7b68d2","sha512":"b19d37b2111aaeccb0090a6500275e310f2af9c417dff9486ab5c09df36c0baee9f939af99c46f307ecf8ca4bb6b3faf6a6a067f56e46116818091c29b4ec7f0","ssdeep":"96:dCgp9oW5orAhGHYmsrLmn5vM4IbOusIcSW6yexn+:dHp9Urb4vrvyusqWJex+","tlshash":"add162a83355757402b6072aeca57cd0bf86ab84824148ebf4bbd1994bc43dc9327c9e","first_seen":"2023-05-17T12:52:42Z","last_seen":"2026-05-29T07:08:22.909015Z","times_seen":28,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/style.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/style.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Mar 2022 17:38:38 GMT\r\netag: \"18c99-6223a01e-3213b1385a8c1fc1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 17024\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":101529,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"38a904aca502bdb2c0298b8c6bfdfb41","sha1":"e8d108878a93b70d75f0110260967195fbb61d5f","sha256":"c6eb2251f08cde33f42331202a7a8f820c551f7aa4bf814b88622183099f0c80","sha512":"e6e026d0f1fef96c9372879c91ec7b803210ac2587844da11927c3edb7bb627cf251980a223d7d60d11ba7711b7eea4762257d3eab131169ada6a63f1ec060fa","ssdeep":"1536:cfXtu6SJRrW2e267ASpuH4G7mJk5YGGuf4tqTkNtB0BSGvLiX:uXEZRKN2IASuYG7Ck5YG54XB0BaX","tlshash":"9ea372963bb52500741bc2697ae6eb91737c8143820eccb97be5606cdf887d80667f4e","first_seen":"2026-03-09T18:50:53.325078Z","last_seen":"2026-03-09T19:08:33.020967Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-tickers.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /external-embedding/embed-widget-tickers.js HTTP/1.1\r\nHost: s3.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 1837468\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\netag: \"659fe4f480b29a59e16476c2e6ecb0ca\"\r\nlast-modified: Mon, 09 Mar 2026 10:44:35 GMT\r\nx-amz-id-2: 8L11mQh0lNT4g7FqAERDhpo6pt1uAHri8KvkSM+7VIzyJ0ND+Qtz4PAwMh4SsO1LJvrDNJGb84I7xUdN06/XRyltvjV2Pl/T\r\nx-amz-request-id: VZFWJYAN0QV1EY45\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncontent-security-policy: default-src 'none'\r\ncdn-cachedat: 03/09/2026 10:45:04\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: bc8abc56215833f6553a2b4ad8403600\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13282,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3458)","md5":"659fe4f480b29a59e16476c2e6ecb0ca","sha1":"3e8b0eb837c57c475da50b7aacf990cf645bed39","sha256":"a81591f68d3e63ba29ad15d9e479119170216af22a16018a99226797700cb191","sha512":"e0fcaac6abbb7eea174da5a19470aea18c1834d64b11453600afe3e5e4e2488bb225f5960a0e59aa927426679dba1befdbbf5a2acef48c1313c35cbcb5cf16e8","ssdeep":"384:vgXsuCWoofYkFdjh01N92sbjc9LKF+SVPtME6s:IXF50f92sbjc9LKF+yyE6s","tlshash":"7452c79ab660d8bd91d945cbe07a2321b61d3948b203eca4b5acd4c510bdccca170fbe","first_seen":"2026-01-31T16:30:22.433274Z","last_seen":"2026-05-05T08:09:20.516301Z","times_seen":161,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":74,"dns":12,"connect":7,"send":0,"wait":9,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/high-liquidity.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/high-liquidity.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"bc5-5c3d2648-56422e4b192ed205;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3013\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"001e9c56a2141a9a9cfff2f2345b2b7a","sha1":"5f6ea2212fbf46397aef52d60a4f7066f13bca43","sha256":"69d8f05bf7d183bb934370c75eab1cd74480582ff61df2e4b1fc68cf15c05931","sha512":"0dca22014145c4db891b0c84fa7bc719df758dd1c08b11782418822cc87eb9bfa3ab118b577e38a3aa12fcbea907b8f2d1044cb63c23c4921e90528e26ee3b6c","ssdeep":"","tlshash":"c9513a4ee9545402829cea8b98f39117c72efc00a6e0a199d9bfd8129874123610c1af","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-06-07T23:42:52.946971Z","times_seen":310,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/js/jquery-2.1.4","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/js/jquery-2.1.4 HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T09:29:17.285502Z","times_seen":40773,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/js/particle.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/js/particle.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"881c-5c3d2648-1eabb0692958627d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6636\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34844,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1007), with CRLF line terminators","md5":"2fea79b611e901ab1752082da00d9800","sha1":"3bb3b4612fcb3e3d218c4ccb212cb5ebd56ca6df","sha256":"01c680c92dac220fa46e54485a5706edc29702c10d3240b4daf4a62abe8f6eb7","sha512":"d2e35b82106f1a83c36299ecb9d90f541255367385a9f44191b39772d6ead7b8ac8332f4e758118f3ef6a0c15d871daaef85252a4a78fa0961e2e2eab96e7980","ssdeep":"768:VJuZaeTJUI8t3SGbbtMErGwuYgU6vWB0qQGuhsxrOJ2Lk:KZaeTJB8t3SGbbtMErGOQ5hUrOJ2o","tlshash":"6af2311e52f22d3a63b6f3a08eddc110db6761a7278208b1be3c52689f3545253adf64","first_seen":"2023-03-10T22:28:39Z","last_seen":"2026-06-07T23:42:52.952391Z","times_seen":147,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T18:50:25.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Mon, 09 Mar 2026 18:50:25 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]}],"data":{"size":69512,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (660)","md5":"9d0567ebc0d4529ef6b3a96f21578eaf","sha1":"3c542848c81a03176a2e836db60cd2b8d9c89868","sha256":"137b2496f57b65e0ef1e43362a814ea119d48a483fe39d9c363fd510ccb6548b","sha512":"58fee26df45527b040ca9af80ae88460fff52e972d359eac2b75b06b8b23ee805eea384c875bf37ed55a7662ed025e41fe604b40c3948d8595eed5031598666a","ssdeep":"768:7mR4cebJ1O39FRGJ1pQBFHne4Pd3yPzGF:iR4VbWSpQBFHne4QPzq","tlshash":"6a636329d9f61533009784e2b9a51b0bafe5964bc65f8a5037ec0ac82fc7dcacc1765c","first_seen":"2026-03-09T18:50:53.300708Z","last_seen":"2026-03-09T19:08:33.014597Z","times_seen":3,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":276,"dns":137,"connect":22,"send":0,"wait":109,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/ion.rangeSlider.skinFlat.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/ion.rangeSlider.skinFlat.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"8c5-5c3d2648-6331e7bb1130fdff;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 659\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2245,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4f740eac4029ad310927795fb8cfdf9a","sha1":"cc6ffaba037221112b494ede708f8271d863ebe3","sha256":"6b92b6a1fd691cee26488bb8dd0c04622d5ebb511670cd71465ee79cf9565856","sha512":"9dc762a09b2c4cd196dd164838c604e86ebfd2e5e6c90e151123498b0d61633f456e6eaab81cdcfd812e8eadfc51324806dfb21985d77c3b914e89e5dd6c3152","ssdeep":"","tlshash":"2b41d0a2dbb21c457862d5a02b649f8f232a390bc01bc96cbbdd361c4f417d074f2a94","first_seen":"2023-06-20T22:17:54Z","last_seen":"2026-03-15T05:18:35.173551Z","times_seen":17,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/world-coverage.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/world-coverage.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"f51-5c3d2648-3102614105f1f6e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3921\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b278a9ca96487f885ce54e83a91d18df","sha1":"293a0cca75816f14bb6e6fec79538bcce279291f","sha256":"e34c25320923a041bb5365fc894419f86fdaacf4fca7676a3d3bc5a24fa9be48","sha512":"7f79c4f4c5d02ea2db5ef99125bee57e26b8fe3f199c9b7867c7965e86cd7485a43c7ffe4d2dee33ce45068d02099a7970de50d196f0bc7fdc457dd354104144","ssdeep":"","tlshash":"6d814b4afb322442d24cdc8336e9906acbc41588e0f5e197f9cfd827e9a531a590c7cb","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-06-07T23:42:52.974548Z","times_seen":318,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/images/1532345115h7.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/images/1532345115h7.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"a39-5c3d2648-45e0109265473b98;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2617\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 97, 8-bit/color RGBA, non-interlaced","md5":"0e91475b41c30343e41037fb236bb160","sha1":"59df634a0bfa11b7976960dd8d15954ba8553cba","sha256":"9ba9d895b64a52ba98b8fdc50a04685c8632d80fc7ebb4d4d282d33cba260b34","sha512":"00de32176db6ba270cca062795fa74b97e65c42683a7d12147e8422884bbd70d4d82437eef1cf05254865b44b79c9cd03ecf92101e8a8a130d67c801aa42c03b","ssdeep":"","tlshash":"ca51f84fa38170f2aeaed490ee4f6efc39564400104b6d04f6578e5131b8ccec4ce868","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-06-07T23:42:52.941102Z","times_seen":166,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/assets/js/main.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Jan 2019 05:27:30 GMT\r\netag: \"1a8b-5c3ec0c2-a88f4bd9edc13dd1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1266\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2ed94ea455b41c06a76f1d0cceb22a76","sha1":"cafcdccb8f7fd6731c58ec048169e77eb32ead56","sha256":"462c95b65a27d4a72991003ba2d383b11cea0a700c388ad9595c8e290440d8a2","sha512":"eed1a08dbdd56e0dac07c424548aa0441d0586be85523f9b442893fa8065891fee1cca02e19f2095e54ca782dc318b6a29ff855eaea4a44dfb5deb98b33a7a6b","ssdeep":"192:/kpvRBb4sXzbHZ64tE1mAsUcq2bD1zcyCFbD1zcyCAtvcxuN7:/QL9bD1zcxbD1zcU","tlshash":"4ae1100a68f3011161277526eb3f2026e758a537454aec58bc9c1ed82f18a6c92fffdd","first_seen":"2025-08-06T06:00:58.421197Z","last_seen":"2026-03-15T05:18:35.151961Z","times_seen":12,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/js/custom.js","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/js/custom.js HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"415d-5c3d2648-5b8ae6ce815187b5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3751\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16733,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"15bb039b983275e815c292f403dcda76","sha1":"7527a324f79361e2afa31b8e77cfe3f4a6871522","sha256":"653216674ad947656fb2d6977bd480adbf07295f4cbbbbc8211ed05d38714307","sha512":"6fa4c8d8e9608521f8529234965e82bd6a3e6dafded7ae09251c607070965559ae46e2e79509123ee2a650c9ec87a166f8ab53fd1bf2c9d91652e7ee032437e4","ssdeep":"384:7Xgx0WIx00bfSnEv9dfh2xltrdWpVVkTtUpac3i3w3pQx:cxWxDfiEv9dfh2xltr+kJlc3i3w3pQx","tlshash":"10725445ffdc686180bff2376eaf60cce53d507296008c957d2c98881f65a68922ef2d","first_seen":"2023-03-08T01:04:44Z","last_seen":"2026-06-05T01:28:54.509247Z","times_seen":124,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 06:13:40 GMT","end":"Tue, 19 May 2026 05:12:24 GMT"},"fingerprint":{"sha1":"DC:97:69:5E:8E:EE:A7:AE:08:2C:BA:84:27:CC:78:BE:48:DE:D9:B8","sha256":"B2:BD:82:B1:F5:33:E3:71:20:4B:29:85:BB:B8:05:14:BC:40:94:63:88:A2:BF:5D:3B:63:04:29:51:B2:D9:85"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grkebpsaRyrZJTVUInjVjCP%2Foe59O6LdCWX%2BoULHVhxmjf7RVd2K%2Br9tVI2p7CbNnmupqODfzkLuhEJdDDKpRtNfWZm8Q1j%2FsfxEw7UsM%2F25lQ%3D%3D\"}]}\r\ncf-ray: 9d9c43ec585b2d96-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":55,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/font-awesome.min.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/font-awesome.min.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"7907-5c3d2648-419a76c010b7fa3e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6660\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30983,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30820)","md5":"771bf1e7b925ccabb28b44659879800e","sha1":"4a8d793a5aa31b0c751765fb6d59f62a7f85c1f6","sha256":"28d785af3338e59822d248dcd9c320f4daa9ca4cd81d4529d408a70d0b0c41c2","sha512":"63f758f4ce586419095ddc063b595d5b0e4243141508fef889fe07fa641ae5375d3667075b39695279907a971e4ce40f8b8394d22a918df1c3591b963001e4ca","ssdeep":"384:au5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:Nlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"f2d242e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226512c5fb9","first_seen":"2023-04-17T04:01:30Z","last_seen":"2026-04-17T04:09:45.537762Z","times_seen":14,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/select2.min.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/select2.min.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"28b8-5c3d2648-7d24ea3213127ec6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1657\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10424,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10424), with no line terminators","md5":"b6ac945e5014ea46d16bb9d6fd604c63","sha1":"58a567888f6b248faadac928597549670adcd0c0","sha256":"eae958dbba247bb8dd39ec2dbca5b34ee3c90091d367cfc4d5867a07e49fd16d","sha512":"89592a0e0ff34ed52bcbfffe8eb36c211f3266e005f384899ab9a75413527946e37b0321a082522b872053b8e500a4ca4338c3c8d7ad8d78b4dab05408f5dc03","ssdeep":"192:ON5InTfc3aMlw8X8SV2KaECbjOZWcVcSvGuh:YITfXMhb8pEHZWoL","tlshash":"6b22ba297ecc6234a0be8d7f5cf670a05638ed4fd4142bcab9aad954c9e1031178b60f","first_seen":"2023-04-10T15:16:43Z","last_seen":"2026-06-07T16:17:25.797172Z","times_seen":233,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 09 Mar 2026 18:50:26 GMT\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f26a7ce9efdf3198522588e90722c271","sha1":"a51cf2052c4bf9775488622e223557c380cc4acc","sha256":"7023201ae131168da7538090c3bc8ba1cff47e2b3233842aff046d1814315711","sha512":"bf613ca6d1d3b2efa920368fc16431c72d7cd40e3da15ac58820eb343e8bbd6dc52280af7ecdecf5869d46764736073da8e99f6ec3e5c5eba62d9b3780fd4226","ssdeep":"384:+eO2pXt2tv/qY49Ynx8bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5H:YbPUiCAgkgHLFosL3Jbc2","tlshash":"09231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-17T17:43:28.294801Z","last_seen":"2026-06-08T12:19:57.69959Z","times_seen":1769,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":288,"dns":0,"connect":47,"send":0,"wait":65,"receive":0,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.yandex.net/website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=en\u0026widgetTheme=dark\u0026autoMode=true","fqdn":"translate.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"213.180.204.194","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"translate.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 21:05:10 GMT","end":"Fri, 24 Apr 2026 20:59:59 GMT"},"fingerprint":{"sha1":"70:E9:63:A0:61:5E:67:0B:ED:A3:73:E0:4B:79:3E:59:FB:B8:D9:69","sha256":"B2:77:2D:B9:25:A9:F2:9F:62:AF:E6:3E:A7:02:15:CA:92:D3:E7:E7:E9:85:B4:7B:69:AB:E7:96:55:A2:AF:E5"}}},"request":{"raw":"GET /website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=en\u0026widgetTheme=dark\u0026autoMode=true HTTP/1.1\r\nHost: translate.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 12563\r\nreferrer-policy: no-referrer-when-downgrade\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-language: en\r\nvary: Accept-Language\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness\r\nset-cookie: _GdCk=nsu000tbr0c2; expires=Wed, 11-Mar-2026 18:50:26 GMT; HttpOnly; Max-Age=172800; Path=/; Secure\n_yasc=A+P7LKCnOmO/zI+bSJmuPUi8mnOWXgGHfRAfO2Gu50KPmXEq8qGykya20kuuY1I=; domain=.yandex.net; path=/; expires=Thu, 06 Mar 2036 18:50:26 GMT; secure\nbh=YPKsvM0GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Expires=Tue, 13 Apr 2027 18:50:26 GMT; SameSite=None; Secure\r\ncontent-type: application/javascript; charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12563,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"951aba2ca55dd753d8545a741bdf9c16","sha1":"2bf684f340b0b62c32e7df702533f6ed54d696f5","sha256":"6cbafc6e723800d80127a041fb04db3996f27346e2888ebe9c3720af0fb5a85c","sha512":"46d6616bcb99c1a13eca176c3a3ac601902fb5ce828b73f5ae4a3fc520b18beb8d917c90e262f69e3c77de9c12027cee8cf997784d8d33421be3185f856b0236","ssdeep":"192:E5o7XrVWI8YWdDEWvfz8tFMV+xpTyzYfrUyzgoWcC6TCpULkHpYEyr54YAqDkr3Q:D7XI3vfsFMVQpnLjrg16/","tlshash":"90420d1829f22030c567747f8fcf61087539905fa009ed517ead86c89fa49385beafad","first_seen":"2026-03-09T18:50:53.391824Z","last_seen":"2026-03-09T18:50:53.391824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":249,"dns":38,"connect":46,"send":0,"wait":81,"receive":1,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-forex-heat-map.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /external-embedding/embed-widget-forex-heat-map.js HTTP/1.1\r\nHost: s3.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 1837468\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\netag: \"45da0ac014bfe21eadab67162849446e\"\r\nlast-modified: Mon, 09 Mar 2026 10:44:37 GMT\r\nx-amz-id-2: RD7T6CNC0+MRuJ7hZlj0T4FLrhWkuJu4fkCQeEvXVLgP9fNTe1L7mfr/Go1ZU1BOhkXxxXXP2y0=\r\nx-amz-request-id: 6V2MRQDSHH3QAYRH\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncontent-security-policy: default-src 'none'\r\ncdn-cachedat: 03/09/2026 13:00:12\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b615f19ee0036fde911ffd92d783924f\r\ncdn-cache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13010,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3458)","md5":"45da0ac014bfe21eadab67162849446e","sha1":"e1118f0d0a8473b18123ea3c9106aa2934bdb17f","sha256":"42a99ee4267d1301aef94452bea2eddd2d42a263a304e68ca70e7dd68e1da4ee","sha512":"2787d4d712441aee71cf2b84622dba06074d9eeb7b03d5206b83b49861f3ce206ad74f860a48f07c2f8c26729691f058ce3555fb35f760a3365b83ce91c88dc1","ssdeep":"384:vgXsuCWoofYkFdjh01N92sbjc9uKF+SVPtMEO/:IXF50f92sbjc9uKF+yyEE","tlshash":"e742c7aab660dcbd91d945cba07a2321b61d3944b203eca4f5acd4c510bdccca531fbe","first_seen":"2026-02-01T01:08:21.096707Z","last_seen":"2026-05-05T04:32:19.09072Z","times_seen":105,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":139,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-technical-analysis.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /external-embedding/embed-widget-technical-analysis.js HTTP/1.1\r\nHost: s3.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 1837468\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\netag: \"855c111391b39f09616bdc6da12dd8a0\"\r\nlast-modified: Mon, 09 Mar 2026 10:44:38 GMT\r\nx-amz-id-2: kEoXHdqeUc7Hy8Wrw9Tz2SsQL6bhQSHDjjxgz3xNZcugxT8kmmc8wfLhaak94oOaAK9o4F/Yxi4=\r\nx-amz-request-id: M7BE7B70E31W0N3Z\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncontent-security-policy: default-src 'none'\r\ncdn-cachedat: 03/09/2026 14:27:54\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9587c6df2c833f235f9c195e8cfaa843\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13220,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3458)","md5":"855c111391b39f09616bdc6da12dd8a0","sha1":"f9b081a284315a4478d45c458dfde732ff05440a","sha256":"d345465c6fa3bf34f68ab3dd91d047e754b9c0c9b73f618cc47dff6661466464","sha512":"e46ca0b0f912918cd4deb24d00d4d7d6566b90358c330a541bbbfcf07eb828dd519dde6fb49b28d11a97a69b158be641ce6fcb9e5a1a564ba698a0cc00d5d8f2","ssdeep":"384:vgXsuCWoofYkFdjh01N92sbjc9gK2+SVPtMEVB:IXF50f92sbjc9gK2+yyEVB","tlshash":"7d52c69ab660dcbd91d545dba07a2321b61d3948b203eca4b5acd4c510fdccca531fbe","first_seen":"2026-02-02T05:13:49.806062Z","last_seen":"2026-05-03T18:39:52.278031Z","times_seen":28,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":14,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/css/bootstrap.min.css","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/css/bootstrap.min.css HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"1d985-5c3d2648-789767c595375543;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 18269\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121221,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"69131ad8a01e354a7d15570cb8a58949","sha1":"faad69b68d0fc7cc990f9fc4cff9bed36a1b61fa","sha256":"3b6c84dbeede31aa449d6eadd44fc06e37e1c85d1cc2e189c968c80fffd31b9b","sha512":"e7b104129fd089555abd98aa120e315f8144ec708f9c75787b7e0105ff0de07e7057437dbf3605e958dcdd22beb3bf463e371ba0f39daa90e82184fff80ce527","ssdeep":"768:VyMGxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:gw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"69c3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f846ca1673f1a","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-06-06T13:45:19.198341Z","times_seen":140,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Montserrat:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 09 Mar 2026 18:50:26 GMT\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3634,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"21505d27bd02f1df730476479b0790db","sha1":"8406d5dd1183c72d674d9257cae5e461d54e7b8b","sha256":"d50f451c09ef85e63a5acdca187d40ad69be69f9b389cfb6aac6b96eb6dbec11","sha512":"c308d5ada9f158734475da11df2166a08c4e3dd01e9d3c3a9d65c39e196cfd007652e96a1905d57486109ff4d7da1e662942f2f41079b0fdc346027f3361300a","ssdeep":"","tlshash":"7271ae51101ae500a7472cc923cf7e26cd4e21667494c4367bfe2ca8ade6c365321b3d","first_seen":"2025-09-05T00:59:45.838605Z","last_seen":"2026-06-08T10:11:27.039996Z","times_seen":10573,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":287,"dns":1,"connect":59,"send":0,"wait":65,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xbct.trade/bci-assets/images/icons/orange/buy-sell-bitcoins.png","fqdn":"xbct.trade","domain":"xbct.trade","tld":"trade"},"ip":{"addr":"198.251.84.7","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xbct.trade/","date":"2026-03-09T18:50:26.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xbct.trade","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 19:52:00 GMT","end":"Sat, 09 May 2026 19:51:59 GMT"},"fingerprint":{"sha1":"9B:B7:6D:81:F7:F8:A1:F4:0D:BE:9A:F3:A3:75:E3:39:A8:03:E8:B1","sha256":"7D:78:BC:F2:A5:E0:A1:12:27:F7:D2:6C:98:62:D8:5F:3F:39:98:10:39:69:D1:4D:E4:27:83:7C:C0:0D:57:25"}}},"request":{"raw":"GET /bci-assets/images/icons/orange/buy-sell-bitcoins.png HTTP/1.1\r\nHost: xbct.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xbct.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Jan 2019 00:16:08 GMT\r\netag: \"eef-5c3d2648-90caa000822d3059;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3823\r\ndate: Mon, 09 Mar 2026 18:50:26 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3823,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2b3b1e3d4335cf2e13cac2ab649da39b","sha1":"e0fbead572e61c239ebd312c33ef0ae1812d11c1","sha256":"6fc965cc439453ac7f309a61f6af2983d139a2202de4a3b382ce545941496c9a","sha512":"c8c7ba93a3df6c9053bbfb184d2527483293daa1bd8b71dc61834d475af4ef2c35295d9b4d2b06a6df3de7ba219d835142f60c841a3912dbc8e550436560e57f","ssdeep":"","tlshash":"49714a0566322c81a23e50d678e751ca6e56274095a0f1a7fa8be4020ec237a8858acf","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-06-07T23:42:52.955018Z","times_seen":341,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"xbct.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}